high7.5Public exploit code
CVE-2006-0522
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)2006-04-15 · webapps · cgi · Verified
Impact
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Sygate Management Server | through 4.1_mr_2_build_1417_english Versions 3.5_mr_3_build_894_english, 4.0_mr_1_build_1104_english, 4.1_ga_build_1258_japanese, 4.1_mr1_build_1351_chinese |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18689
- http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html
- http://securitytracker.com/id?1015561
- http://www.osvdb.org/22883
- http://www.securityfocus.com/bid/16452
- http://www.vupen.com/english/advisories/2006/0402
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24413
- http://secunia.com/advisories/18689
- http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html
- http://securitytracker.com/id?1015561
- http://www.osvdb.org/22883
- http://www.securityfocus.com/bid/16452
- http://www.vupen.com/english/advisories/2006/0402
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24413