The host is installed with Symantec Messaging Gateway 9.5 or 9.5.1 and is prone to multiple directory traversal vulnerabilities. The flaws are present in the application, which fails to sufficiently sanitize user-supplied input. Successful exploitation allows remote attackers to read arbitrary files.