CVE-2012-0299 The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, v...
HighCVSS 10.0
EPSS 63.7%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly execute this code, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec web gateway | = 5.0 | No fix listed |
| symantec web gateway | = 5.0.1 | No fix listed |
| symantec web gateway | = 5.0.2 | No fix listed |
References
- 53443 vdb-entry
- www.symantec.com vendor-advisory
- symantec-web-unspec-command-exec(75730) vdb-entry