Symantec Web Gateway - pbcontrol.php RCE (CVE-2012-2953)

Exploits CVE-2012-2953 command injection in pbcontrol.php filename. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Web Gateway pbcontrol.php RCE CVE-2012-2953 — opens execute session.""" import re from urllib.parse import quote from kittysploit import...

Symantec Web Gateway - pbcontrol.php RCE Detection (CVE-2012-2953)

Detects CVE-2012-2953 by requesting /spywall/pbcontrol.php?filename=...;id;... !/usr/bin/env python3 -- coding: utf-8 -- """Symantec Web Gateway pbcontrol.php RCE CVE-2012-2953.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Symantec Web Gateway pbcontrol.php Command Injection

Added: 08/24/2012 CVE: CVE-2012-2953 BID: 54426 OSVDB: 84120 Background Symantec Web Gateway protects organizations against multiple types of Web-based malware and prevents data loss over the Web. Problem Symantec Web Gateway 5.0.x.x before 5.0.3.18 is vulnerable to command injection due to...

Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit

Exploit for linux platform in category remote exploits !/usr/bin/python import urllib import sys ''' print " " print " Symantec Web Gateway 5.0.3.18 pbcontrol.php ROOT RCE Exploit" print " Offensive Security - http://www.offensive-security.com" print " \n" 06 Jun 2012: Vulnerability reported to...

Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

This module exploits a command injection vulnerability found in Symantec Web Gateway's HTTP service. While handling the filename parameter, the Spywall API does not do any filtering before passing it to an exec call in proxyfile, thus results in remote code execution under the context of the web...