Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

symantec web gateway 5.0 vulnerabilities and exploits

(subscribe to this query)
8.3
CVSSv2
CVE-2013-1616
The management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 allows remote malicious users to execute arbitrary commands by injecting a command into an application script.
Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway 5.0Symantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
6
CVSSv2
CVE-2013-4671
Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway 5.0Symantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
7.4
CVSSv2
CVE-2013-1617
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
Symantec Web Gateway 5.0Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
4.3
CVSSv2
CVE-2013-4670
Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway 5.0Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
7.2
CVSSv2
CVE-2013-4672
The management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.
Symantec Web Gateway 5.0Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
9.3
CVSSv2
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote malicious users to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Symantec Antivirus Scan Engine 4.0Symantec Antivirus Scan Engine 4.3.12Symantec Antivirus Scan Engine 4.3Symantec Brightmail Antispam 6.0.2Symantec Brightmail Antispam 6.0.3Symantec Client Security 2.0.4Symantec Client Security 2.0.5 Build 1100 Mp1Symantec Client Security 3.0.1.1007Symantec Client Security 3.0.1.1008Symantec Client Security 3.0.2.2021Symantec Client Security 3.1Symantec Mail Security 4.0Symantec Mail Security 4.1Symantec Mail Security 4.5.4.743Symantec Mail Security 4.6 Build 97Symantec Mail Security 5.0.0.204Symantec Norton Antivirus 10.0.0.359Symantec Norton Antivirus 10.0.0Symantec Norton Antivirus 10.0.2.2010Symantec Norton Antivirus 10.0.2.2011Symantec Norton Antivirus 10.1.4.4010Symantec Norton Antivirus 10.1.4
9.3
CVSSv2
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote malicious users to execute arbitrary code via multiple crafted CAB archives.
Symantec Antivirus Scan Engine 4.3.12Symantec Antivirus Scan Engine 4.3Symantec Brightmail Antispam 6.0.1Symantec Brightmail Antispam 6.0.2Symantec Client Security 2.0.4Symantec Client Security 3.0.1.1001Symantec Client Security 3.0.1.1007Symantec Client Security 3.0.2.2020Symantec Client Security 3.0.2.2021Symantec Mail Security 4.0Symantec Mail Security 4.1Symantec Mail Security 4.6.3Symantec Mail Security 4.6 Build 97Symantec Norton AntivirusSymantec Norton Antivirus 10.0.0.359Symantec Norton Antivirus 10.0.2.2002Symantec Norton Antivirus 10.0.2.2010Symantec Norton Antivirus 10.1.396Symantec Norton Antivirus 10.1.4.4010Symantec Norton Antivirus 2004Symantec Norton Antivirus 2005Symantec Norton Antivirus 9.0.1.1.1000
5.8
CVSSv2
CVE-2013-4673
The management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 does not properly implement RADIUS authentication, which allows remote malicious users to execute arbitrary code by leveraging access to the login prompt.
Symantec Web Gateway 5.0.3.18Symantec Web GatewaySymantec Web Gateway 5.0Symantec Web Gateway 5.0.1Symantec Web Gateway 5.0.2Symantec Web Gateway 5.0.3Symantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -
5
CVSSv2
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshak...
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
5
CVSSv2
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
Cisco Firewall Services ModuleSymantec Clientless Vpn Gateway 4400 5.0Hp Apache-based Web Server 2.0.43.00Cisco Firewall Services Module 1.1.3Cisco Firewall Services Module 1.1.2Hp Aaa ServerCisco Firewall Services Module 1.1 \\(3.005\\)Hp Apache-based Web Server 2.0.43.04Cisco Firewall Services Module 2.1 \\(0.208\\)Avaya Sg203 4.4Hp Hp-ux 11.11Redhat Enterprise Linux Desktop 3.0Hp Hp-ux 11.23Cisco Ciscoworks Common Management Foundation 2.1Freebsd Freebsd 5.1Avaya Sg208 4.4Redhat Enterprise Linux 3.0Avaya Sg200 4.4Avaya Sg5 4.4Redhat Linux 7.2Cisco Ciscoworks Common Services 2.2Openbsd Openbsd 3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook