CVE-2012-0299

Related Files

Symantec Web Gateway 5.0.2.8 Arbitrary PHP File Upload Vulnerability

Posted Jun 11, 2012

Authored by Tenable Network Security, juan vazquez | Site metasploit.com

This Metasploit module exploits a file upload vulnerability found in Symantec Web Gateway's HTTP service. Due to the incorrect use of file extensions in the upload_file() function, this allows us to abuse the spywall/blocked_file.php file in order to upload a malicious PHP file without any authentication, which results in arbitrary code execution.

tags | exploit, web, arbitrary, php, code execution, file upload

advisories | CVE-2012-0299, OSVDB-82025

SHA-256 | cf93b4b95c23f5407ba012edff8b93021d9cf2a529de505d5f968bbc6cf64f26

Download | Favorite | View

Zero Day Initiative Advisory 12-091

Posted Jun 9, 2012

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 12-091 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Web Gateway. Authentication is not required to exploit this vulnerability. The specific flaw exists because Symantec Web Gateway allows unauthenticated users to upload a file while preserving the file extension. This allows users to upload additional script files that can be used to execute remote code from user supplied commands under the context of the webserver.

tags | advisory, remote, web, arbitrary

advisories | CVE-2012-0299

SHA-256 | e6455c20b1364db65ee13fb4709268297326339c75eaaeafc7611ed4f8084cdd

Download | Favorite | View