Vulnerability Name:

CVE-2012-2953 (CCN-77111)

Assigned:2012-07-20
Published:2012-07-20
Updated:2017-12-22
Summary:The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts.
CVSS v3 Severity:9.6 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
8.3 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
8.3 High (CCN CVSS v2 Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-78
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2012-2953

Source: CCN
Type: Packet Storm Web site
Symantec Web Gateway 5.0.2.18 pbcontrol.php Command InjectionSymantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

Source: CCN
Type: SA50031
Symantec Web Gateway Multiple Vulnerabilities

Source: CERT-VN
Type: UNKNOWN
VU#108471

Source: CCN
Type: OSVDB ID: 84120
Symantec Web Gateway spywall/pbcontrol.php filename Parameter Remote Shell Command Execution

Source: BID
Type: Vendor Advisory
54426

Source: CCN
Type: BID-54426
Symantec Web Gateway CVE-2012-2953 Remote Shell Command Execution Vulnerability

Source: CCN
Type: SYM12-011
Security Advisories Relating to Symantec Products - Symantec Web Gateway Security Issues

Source: CONFIRM
Type: UNKNOWN
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00

Source: XF
Type: UNKNOWN
symantec-web-console-command-exec(77111)

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [07-24-2012]

Source: EXPLOIT-DB
Type: EXPLOIT
EDB-ID: 20113

Source: CCN
Type: Rapid7 Vulnerability and Exploit Database [05-30-2018]
Symantec Web Gateway 5.0.2.18 pbcontrol.php Command Injection

Vulnerable Configuration:Configuration 1:
  • cpe:/a:symantec:web_gateway:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:web_gateway:5.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:symantec:web_gateway:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:web_gateway:5.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:web_gateway:5.0.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    symantec web gateway 5.0
    symantec web gateway 5.0.1
    symantec web gateway 5.0.2
    symantec web gateway 5.0.3
    symantec web gateway 5.0
    symantec web gateway 5.0.1
    symantec web gateway 5.0.3