Details of VAR-201207-0233

ID

VAR-201207-0233

CVE

CVE-2012-2953

TITLE

Symantec Web Gateway contains multiple vulnerabilities

Trust: 0.8

sources: CERT/CC: VU#108471

DESCRIPTION

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input to application scripts. Successful exploits will result in the execution of arbitrary attack-supplied commands in the context of the affected application. Symantec Web Gateway (SWG) is a set of network content filtering software developed by Symantec Corporation of the United States. The software provides web content filtering, data loss prevention, and more. ---------------------------------------------------------------------- We are millions! Join us to protect all Pc's Worldwide. Download the new Secunia PSI 3.0 available in 5 languages and share it with your friends: http://secunia.com/psi ---------------------------------------------------------------------- TITLE: Symantec Web Gateway Multiple Vulnerabilities SECUNIA ADVISORY ID: SA50031 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50031/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50031 RELEASE DATE: 2012-07-23 DISCUSS ADVISORY: http://secunia.com/advisories/50031/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50031/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50031 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Multiple vulnerabilities have been reported in Symantec Web Gateway, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to bypass certain security restrictions, conduct SQL injection attacks, and compromise a vulnerable system. 2) An error within the authentication mechanism of the application can be exploited to bypass the authentication by modification of certain local files. 3) Certain unspecified input passed to the management console is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. inject arbitrary shell commands. The vulnerabilities are reported in versions prior to Database Update 5.0.0.438. SOLUTION: Apply Database Update 5.0.0.438. PROVIDED AND/OR DISCOVERED BY: The vendor credits: 1) Offensive Security via CERT/CC 2, 3) Offensive Security via CERT/CC and an anonymous person via CERT/CC. 4, 5) An anonymous person via CERT/CC. ORIGINAL ADVISORY: SYM12-011: http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_00 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 3.33

sources: NVD: CVE-2012-2953 // CERT/CC: VU#108471 // JVNDB: JVNDB-2012-003291 // CNVD: CNVD-2012-3858 // BID: 54426 // VULHUB: VHN-56234 // PACKETSTORM: 114935

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2012-3858

AFFECTED PRODUCTS

vendor:	symantec	model:	web gateway	scope:	eq	version:	5.0.3	Trust: 2.5
vendor:	symantec	model:	web gateway	scope:	eq	version:	5.0.1	Trust: 2.5
vendor:	symantec	model:	web gateway	scope:	eq	version:	5.0.2	Trust: 1.6
vendor:	symantec	model:	web gateway	scope:	eq	version:	5.0	Trust: 1.6
vendor:	symantec	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	symantec	model:	web gateway	scope:	eq	version:	5.0.3.18	Trust: 0.8
vendor:	symantec	model:	web gateway	scope:	lt	version:	5.0.x	Trust: 0.8

sources: CERT/CC: VU#108471 // CNVD: CNVD-2012-3858 // BID: 54426 // JVNDB: JVNDB-2012-003291 // CNNVD: CNNVD-201207-418 // NVD: CVE-2012-2953

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2012-2953
value:	HIGH
Trust: 1.0
NVD:	CVE-2012-2953
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201207-418
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-56234
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2012-2953
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-56234
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-56234 // JVNDB: JVNDB-2012-003291 // CNNVD: CNNVD-201207-418 // NVD: CVE-2012-2953

PROBLEMTYPE DATA

problemtype:

CWE-78

Trust: 1.9

sources: VULHUB: VHN-56234 // JVNDB: JVNDB-2012-003291 // NVD: CVE-2012-2953

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201207-418

TYPE

operating system commend injection

Trust: 0.6

sources: CNNVD: CNNVD-201207-418

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-003291

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-56234

PATCH

title:	SYM12-011	url:	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_00	Trust: 0.8
title:	SYM12-011	url:	http://www.symantec.com/ja/jp/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00	Trust: 0.8
title:	Patch for Symantec Web Gateway shell command execution vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/19136	Trust: 0.6

sources: CNVD: CNVD-2012-3858 // JVNDB: JVNDB-2012-003291

EXTERNAL IDS

db:	NVD	id:	CVE-2012-2953	Trust: 3.4
db:	CERT/CC	id:	VU#108471	Trust: 2.7
db:	BID	id:	54426	Trust: 2.0
db:	JVNDB	id:	JVNDB-2012-003291	Trust: 0.8
db:	CNNVD	id:	CNNVD-201207-418	Trust: 0.7
db:	SECUNIA	id:	50031	Trust: 0.7
db:	CNVD	id:	CNVD-2012-3858	Trust: 0.6
db:	NSFOCUS	id:	20124	Trust: 0.6
db:	EXPLOIT-DB	id:	20088	Trust: 0.1
db:	EXPLOIT-DB	id:	20113	Trust: 0.1
db:	PACKETSTORM	id:	115056	Trust: 0.1
db:	SEEBUG	id:	SSVID-74008	Trust: 0.1
db:	SEEBUG	id:	SSVID-73984	Trust: 0.1
db:	VULHUB	id:	VHN-56234	Trust: 0.1
db:	PACKETSTORM	id:	114935	Trust: 0.1

sources: CERT/CC: VU#108471 // CNVD: CNVD-2012-3858 // VULHUB: VHN-56234 // BID: 54426 // JVNDB: JVNDB-2012-003291 // PACKETSTORM: 114935 // CNNVD: CNNVD-201207-418 // NVD: CVE-2012-2953

REFERENCES

url:	http://www.kb.cert.org/vuls/id/108471	Trust: 1.9
url:	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00	Trust: 1.8
url:	http://www.securityfocus.com/bid/54426	Trust: 1.7
url:	about vulnerability notes	Trust: 0.8
url:	contact us about this vulnerability	Trust: 0.8
url:	provide a vendor statement	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-2953	Trust: 0.8
url:	http://jvn.jp/cert/jvnvu108471	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-2953	Trust: 0.8
url:	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20120720_00	Trust: 0.7
url:	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory	Trust: 0.6
url:	http://secunia.com/advisories/50031	Trust: 0.6
url:	http://www.nsfocus.net/vulndb/20124	Trust: 0.6
url:	http://www.symantec.com/business/web-gateway	Trust: 0.3
url:	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120720_00	Trust: 0.1
url:	http://secunia.com/advisories/50031/	Trust: 0.1
url:	http://secunia.com/psi	Trust: 0.1
url:	http://secunia.com/vulnerability_intelligence/	Trust: 0.1
url:	http://secunia.com/advisories/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/	Trust: 0.1
url:	http://secunia.com/vulnerability_scanning/personal/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	https://ca.secunia.com/?page=viewadvisory&vuln_id=50031	Trust: 0.1
url:	http://secunia.com/advisories/50031/#comments	Trust: 0.1
url:	http://secunia.com/advisories/about_secunia_advisories/	Trust: 0.1

CREDITS

Offensive Security working through CERT/CC

Trust: 0.9

sources: BID: 54426 // CNNVD: CNNVD-201207-418

SOURCES

db:	CERT/CC	id:	VU#108471
db:	CNVD	id:	CNVD-2012-3858
db:	VULHUB	id:	VHN-56234
db:	BID	id:	54426
db:	JVNDB	id:	JVNDB-2012-003291
db:	PACKETSTORM	id:	114935
db:	CNNVD	id:	CNNVD-201207-418
db:	NVD	id:	CVE-2012-2953

LAST UPDATE DATE

2024-11-23T22:08:48.638000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#108471	date:	2018-03-21T00:00:00
db:	CNVD	id:	CNVD-2012-3858	date:	2012-07-24T00:00:00
db:	VULHUB	id:	VHN-56234	date:	2017-12-22T00:00:00
db:	BID	id:	54426	date:	2012-07-27T17:11:00
db:	JVNDB	id:	JVNDB-2012-003291	date:	2012-07-30T00:00:00
db:	CNNVD	id:	CNNVD-201207-418	date:	2012-07-24T00:00:00
db:	NVD	id:	CVE-2012-2953	date:	2024-11-21T01:40:00.977

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#108471	date:	2012-07-24T00:00:00
db:	CNVD	id:	CNVD-2012-3858	date:	2012-07-24T00:00:00
db:	VULHUB	id:	VHN-56234	date:	2012-07-23T00:00:00
db:	BID	id:	54426	date:	2012-07-20T00:00:00
db:	JVNDB	id:	JVNDB-2012-003291	date:	2012-07-25T00:00:00
db:	PACKETSTORM	id:	114935	date:	2012-07-23T01:58:36
db:	CNNVD	id:	CNNVD-201207-418	date:	2012-07-24T00:00:00
db:	NVD	id:	CVE-2012-2953	date:	2012-07-23T17:55:03.497