PT-2012-2473 · Symantec · Symantec Web Gateway

Published 2012-05-21 · Updated 2017-12-05 · CVE-2012-0297

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2

Description The management GUI in Symantec Web Gateway does not properly restrict access to application scripts. This allows remote attackers to execute arbitrary code by either injecting crafted data or including crafted data.

Recommendations For Symantec Web Gateway versions 5.0.x through 5.0.2, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the management GUI to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0297

ZDI-12-090

Affected Products

Symantec Web Gateway

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_lfi.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18942 · Exploit
• 🔥 https://exploit-db.com/exploits/19406 · Exploit
• 🔥 https://exploit-db.com/exploits/19065 · Exploit
• 🔥 https://exploit-db.com/exploits/18932 · Exploit
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-12-090 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-0297 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75731 · Note
• http://securityfocus.com/bid/53444 · Note