CVE

Id
57590  
CVE No.
CVE-2012-4347  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.  
Phase
Assigned (20120816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
594138 57590 CVE-2012-4347 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00  View
594139 57590 CVE-2012-4347 BID:56789  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30228 JVNDB-2012-005935 Stoneware webNetwork におけるクロスサイトスクリプティングの脆弱性 Stoneware webNetwork には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4352 57590 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005935.html  View