CVE-2013-4673

Currently unrated

Key Information:

Vendor
Symantec
Status
Web Gateway
Web Gateway Appliance 8450
Web Gateway Appliance 8490
Vendor
CVE Published:
1 August 2013

Summary

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 does not properly implement RADIUS authentication, which allows remote attackers to execute arbitrary code by leveraging access to the login prompt.

References

http://osvdb.org/95702
vdb-entryx_refsource_OSVDB
http://www.symantec.com/security_response/securityupdates...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/61105
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.