cve/2016/CVE-2016-5312.md

CVE-2016-5312

Description

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.

POC

Reference

• http://packetstormsecurity.com/files/138891/Symantec-Messaging-Gateway-10.6.1-Directory-Traversal.html
• https://www.exploit-db.com/exploits/40437/

Github

No PoCs found on GitHub currently.