This host is running Symantec Web Gateway and is prone to multiple vulnerabilities.

Successful exploitation will allow attacker to gain escalated privileges and conduct cross-site scripting and cross-site request forgery attacks and compromise a vulnerable system.

Upgrade to Symantec Web Gateway version 5.1.1 or later, For updates refer to http://www.symantec.com/business/web-gateway

Multiple flaws are due to, - Unspecified errors related to the SWG console interface, login prompt of the SWG console and sudo configuration. - Certain unspecified input is not properly sanitised before being returned to the user. - The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the request.

Symantec Web Gateway versions prior to 5.1.1

Get the installed version Symantec Web Gateway with the help detect NVT and check the version is vulnerable or not.

• http://osvdb.org/95703
• http://seclists.org/bugtraq/2013/Jul/177
• http://secunia.com/advisories/54294
• http://www.exploit-db.com/exploits/27136

---

Updated on 2015-03-25