critical10.0Public exploit code
CVE-2012-2953
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Web Gateway 5.0.2.18 - 'pbcontrol.php' Command Injection (Metasploit)2012-07-27 · remote · linux · Verified
- Symantec Web Gateway 5.0.3.18 - 'pbcontrol.php' Root Remote Code Execution2012-07-24 · remote · linux · Verified
Impact
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Web Gateway | Versions 5.0, 5.0.1, 5.0.2, 5.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/108471
- http://www.securityfocus.com/bid/54426
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00
- http://www.kb.cert.org/vuls/id/108471
- http://www.securityfocus.com/bid/54426
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00