Symantec Web Gateway pbcontrol.php Command Injection
Added: 08/24/2012CVE: CVE-2012-2953
BID: 54426
OSVDB: 84120
Background
Symantec Web Gateway protects organizations against multiple types of Web-based malware and prevents data loss over the Web.Problem
Symantec Web Gateway 5.0.x.x before 5.0.3.18 is vulnerable to command injection due to spywall/pbcontrol.php failing to properly sanitize input passed via the filename parameter. This may allow a remote attacker to execute arbitrary shell commands.Resolution
Upgrade to Symantec Web Gateway 5.0.3.18 or later with the Database Update 5.0.0.438 or later.References
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_00Limitations
This exploit was tested against Symantec Web Gateway 5.0.0.216 on Fedora Project Fedora Core 3 with Exec-Shield Enabled.Platforms
LinuxBack to exploit index