Symantec Web Gateway local file processing Authentication Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Symantec Web Gateway 5.0.3
Symantec Web Gateway 5.0.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54429
Cve id: CVE-2012-2957

Symantec Web Gateway is a Symantec Enterprise Web threat protection solution.

Symantec Web Gateway 5.0.x.x has a local Authentication Bypass Vulnerability. Successful exploitation allows local attackers to process some local files to bypass authentication and access applications illegally.

<* Source: Offensive Security
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Symantec
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.symantec.com/business/security_response/