ID de Prueba:	1.3.6.1.4.1.25623.1.0.807891
Categoría:	Web application abuses
Título:	Symantec Messaging Gateway Directory Traversal Vulnerability (SYM16-016) - Active Check
Resumen:	Symantec Messaging Gateway is prone to a directory traversal; vulnerability.
Descripción:	Summary: Symantec Messaging Gateway is prone to a directory traversal vulnerability. Vulnerability Insight: The flaw exists due to error in the charting component in the Symantec Messaging Gateway which does not properly sanitize user input submitted for charting requests. Vulnerability Impact: Successful exploitation will allow attackers to access to some files/directories on the server for which the user is not authorized. Affected Software/OS: Symantec Messaging Gateway prior to version 10.6.2. Solution: Update to version 10.6.2 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5312 BugTraq ID: 93148 http://www.securityfocus.com/bid/93148 https://www.exploit-db.com/exploits/40437/ http://seclists.org/fulldisclosure/2016/Sep/71 http://packetstormsecurity.com/files/138891/Symantec-Messaging-Gateway-10.6.1-Directory-Traversal.html http://www.securitytracker.com/id/1036908
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.