Published: 21/05/2012 Updated: 05/12/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x prior to 5.0.3 allow remote malicious users to (1) read or (2) delete arbitrary files via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec web gateway 5.0
symantec web gateway 5.0.2
symantec web gateway 5.0.1

Software: Symantec Web Gateway Current Software Version: 5028 Product homepage: wwwsymanteccom Author: S2 Crew [Hungary] CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: 19216882207/spywall/previewProxyErrorphp?err=////////etc/passwd File include and OS command execution: 19216882207/ ...

Symantec Web Gateway version 5028 suffers from local file inclusion, remote command execution, and arbitrary file deletion vulnerabilities ...

CWE-264 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 http://www.securityfocus.com/bid/53442 https://exchange.xforce.ibmcloud.com/vulnerabilities/75732 https://nvd.nist.gov https://www.exploit-db.com/exploits/19406/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2012-0298

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect