CVE-2006-4013

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-07 · updated 2026-06-16
Weakness: CWE-22

Description

Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.

Affected products

Symantec Brightmail Antispam: 4.0, 5.5, 6.0, 6.0.1

References

http://secunia.com/advisories/21223
http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html
http://securitytracker.com/id?1016600
http://www.osvdb.org/27589
http://www.osvdb.org/27590
http://www.securityfocus.com/bid/19182
http://www.vupen.com/english/advisories/2006/3018
https://exchange.xforce.ibmcloud.com/vulnerabilities/28058
https://exchange.xforce.ibmcloud.com/vulnerabilities/28059
http://secunia.com/advisories/21223
http://securityresponse.symantec.com/avcenter/security/Content/2006.07.27.html
http://securitytracker.com/id?1016600

Get alerted when CVE-2006-4013 or the next vulnerability affects your stack