PT-2013-5124 · Symantec · Symantec Web Gateway

Publicado 2013-07-31 · Atualizado 2017-11-18 · CVE-2013-4673

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:A/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.1.1

Description The management console on the Symantec Web Gateway appliance does not properly implement RADIUS authentication. This issue allows remote attackers to execute arbitrary code by leveraging access to the login prompt.

Recommendations For versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4673

Produtos afetados

Symantec Web Gateway

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/85990 · Nota
• http://osvdb.org/95702 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 · Aviso do Fabricante
• http://securityfocus.com/bid/61105 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4673 · Nota de Segurança