682 matches found
CVE-2015-5692
adminmessages.php in the management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to...
CVE-2015-6547
The management console on Symantec Web Gateway SWG appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors...
CVE-2015-5690
Symantec Web Gateway (SWG) management console prior to SWG 5.2.2 / DB 5.0.0.1277 is affected by CVE-2015-5690: a redirect bypass allows an authenticated remote user to bypass access controls and execute arbitrary commands. ZDI confirms a path-processing flaw enabling potential root-level command ...
Symantec Web Gateway Security Bypass Vulnerability
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A security bypass vulnerability exists in Symantec Web Gateway that could be exploited by an attacker to bypass security restrictions and submit a special...
Symantec Web Gateway Arbitrary File Upload Vulnerability
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A security vulnerability exists in Symantec Web Gateway that allows an attacker to submit a special file that can be uploaded and executed bypassing...
Symantec Web Gateway OS Command Injection Vulnerability (CNVD-2015-06070)
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. An OS command injection vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting a specially...
Symantec Web Gateway SQL Injection Vulnerability (CNVD-2015-06066)
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A SQL injection vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting specially crafted SQL...
Symantec Web Gateway Code Injection Vulnerability (CNVD-2015-06069)
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A code injection certificate vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability by submitting a special...
Symantec Web Gateway Cross-Site Scripting Vulnerability (CNVD-2015-06067)
Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A cross-site scripting vulnerability exists in Symantec Web Gateway, which allows remote attackers to exploit the vulnerability to inject malicious script or...
Symantec Web Gateway Arbitrary PHP File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is required to exploit this vulnerability, however it can be bypassed via reflected cross-site scripting. The specific flaw exists within the adminmessages.php...
Symantec Web Gateway Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists within the path processing for command URLs accessed through the management port of the...
Symantec Web Gateway < 5.2 Multiple Vulnerabilities (SYM14-003)
Binary data 8769.prm...
Symantec Web Gateway OS Command Injection (CVE-2014-7285; CVE-2016-5313)
A remote command execution vulnerability has been reported in Symantec Web Gateway. The vulnerability is due to improper input validation. A remote attacker can exploit this issue by sending a malicious HTTP request containing a specially crafted parameter to the target server...
Symantec Web Gateway Login Utility
This module will attempt to authenticate to a Symantec Web Gateway. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/symantecwebgateway' require...
Symantec Web Gateway 5 restore.php Command Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Symantec Web Gateway 5 restore.php Post Authentication Command Injection", 'Description' = %q This module exploits a command injecti...
Symantec Web Gateway 5 restore.php Command Injection Exploit
This Metasploit module exploits a command injection vulnerability found in Symantec Web Gateway's setting restoration feature. The filename portion can be used to inject system commands into a syscall function, and gain control under the context of HTTP service. For Symantec Web Gateway 5.1.1, yo...
Symantec-Web-Gateway-5.0.3.18
06 Jun 2012: Vulnerability reported to CERT 08 Jun 2012: Response received from CERT with disclosure date set to 20 Jul 2012 26 Jun 2012: Email received from Symantec for additional information 26 Jun 2012: Additional proofs of concept sent to Symantec 06 Jul 2012: Update received from Symantec...
[KIS-2014-19] Symantec Web Gateway <= 5.2.1 (restore.php) OS Command Injection Vulnerability
------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability ------------------------------------------------------------------------------ - Software Link: http://www.symantec.com/web-gateway/ - Affecte...
Symantec Web Gateway 5.2.1 OS Command Injection Vilnerability
Symantec Web Gateway versions 5.2.1 and below suffer from a remote OS command injection vulnerability. ------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability...
Symantec Web Gateway 5.2.1 OS Command Injection
------------------------------------------------------------------------------ Symantec Web Gateway = 5.2.1 restore.php OS Command Injection Vulnerability ------------------------------------------------------------------------------ - Software Link: http://www.symantec.com/web-gateway/ - Affecte...