This host is running Symantec Web Gateway and is prone to command execution vulnerability.

Successful exploits will result in the execution of arbitrary attack supplied commands in the context of the affected application. Impact Level: System/Application

Upgrade to Symantec Web Gateway version 5.0.3 or later, For updates refer to http://www.symantec.com/business/web-gateway

The flaw is due to an improper validation of certain unspecified input. This can be exploited to execute arbitrary code by injecting crafted data or including crafted data.

Symantec Web Gateway versions 5.0.x before 5.0.3

• http://osvdb.org/82023
• http://secunia.com/advisories/49216
• http://www.exploit-db.com/exploits/18932
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00

---

Updated on 2015-03-25