Symantec Web Gateway Remote Shell Command Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Symantec Web Gateway 5.0.3
Symantec Web Gateway 5.0.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54426
Cve id: CVE-2012-2953

Symantec Web Gateway is a Symantec Enterprise Web threat protection solution.

Symantec Web Gateway 5.0.x.x has a remote Shell command execution vulnerability. Successful exploitation of this vulnerability allows attackers to execute arbitrary commands in affected applications.

<* Source: Offensive Security
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Symantec
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.symantec.com/business/security_response/