Signature Detail
Short Name |
HTTP:PHP:SYM-WG-IPCHANG |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Symantec Web Gateway ipchange.php Command Injection |
Release Date |
2012/06/25 |
Update Number |
2155 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Symantec Web Gateway ipchange.php Command Injection
This signature detects attempts to exploit a known command injection vulnerability in Symantec Web Gateway. It is due to improper input filtering. In a successful code injection attack, the behavior of the target host is entirely dependent on the intended function of the injected code and executes within the security context of the process.
Extended Description
Symantec Web Gateway is prone to a vulnerability that can allow an attacker to execute arbitrary commands. Successful exploits will result in the execution of arbitrary attack-supplied commands in the context of the affected application.
Affected Products
- Symantec Web Gateway 5.0
- Symantec Web Gateway 5.0.1
References
- BugTraq: 53444
- CVE: CVE-2012-0297