Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-5312
Description:Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.
Test IDs: 1.3.6.1.4.1.25623.1.0.807891  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-5312
BugTraq ID: 93148
http://www.securityfocus.com/bid/93148
https://www.exploit-db.com/exploits/40437/
http://seclists.org/fulldisclosure/2016/Sep/71
http://packetstormsecurity.com/files/138891/Symantec-Messaging-Gateway-10.6.1-Directory-Traversal.html
http://www.securitytracker.com/id/1036908




© 1998-2025 E-Soft Inc. All rights reserved.