PT-2012-2473 · Symantec · Symantec Web Gateway

Publicado 2012-05-21 · Atualizado 2017-12-05 · CVE-2012-0297

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2

Description The management GUI in Symantec Web Gateway does not properly restrict access to application scripts. This allows remote attackers to execute arbitrary code by either injecting crafted data or including crafted data.

Recommendations For Symantec Web Gateway versions 5.0.x through 5.0.2, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the management GUI to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-0297

ZDI-12-090

Produtos afetados

Symantec Web Gateway

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_lfi.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18942 · Exploit
• 🔥 https://exploit-db.com/exploits/19406 · Exploit
• 🔥 https://exploit-db.com/exploits/19065 · Exploit
• 🔥 https://exploit-db.com/exploits/18932 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75731 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-12-090 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-0297 · Nota de Segurança
• http://securityfocus.com/bid/53444 · Nota