Signature Detail
Short Name |
APP:SYMC:WEB-GATEWAY-OS-CMD-INJ |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Symantec Web Gateway OS Command Injection |
Release Date |
2013/08/07 |
Update Number |
2288 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Symantec Web Gateway OS Command Injection
This signature detects attempts to exploit a known vulnerability against Symantec Web Gateway. A successful attack can lead to arbitrary code execution.
Extended Description
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script.
Affected Products
- symantec web_gateway 5.0
- symantec web_gateway 5.0.1
- symantec web_gateway 5.0.2
- symantec web_gateway 5.0.3
- symantec web_gateway 5.0.3.18
- symantec web_gateway up to 5.1
- symantec web_gateway_appliance_8450 -
- symantec web_gateway_appliance_8490 -
References