{"uuid": "9a5fa02b-3fc2-44c0-97aa-439761e456f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-7285", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/symantec_web_gateway_restore.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Egidio Romano\", \"sinn3r \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability found in Symantec Web\\n          Gateway's setting restoration feature. The filename portion can be used to inject\\n          system commands into a syscall function, and gain control under the context of\\n          HTTP service.\\n\\n          For Symantec Web Gateway 5.1.1, you can exploit this vulnerability by any kind of user.\\n          However, for version 5.2.1, you must be an administrator.\", \"disclosure_date\": \"2014-12-16\", \"fullname\": \"exploit/linux/http/symantec_web_gateway_restore\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Symantec Web Gateway 5 restore.php Post Authentication Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/symantec_web_gateway_restore.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/symantec_web_gateway_restore\", \"references\": [\"CVE-2014-7285\", \"OSVDB-116009\", \"BID-71620\", \"URL-http://karmainsecurity.com/KIS-2014-19\", \"URL-http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141216_00\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Symantec Web Gateway 5\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.387356Z"}