Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:SYMC:WORKSPACE-FILE-UPLOAD |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Symantec Workspace Streaming XML-RPC Arbitrary File Upload |
Release Date |
2014/06/09 |
Update Number |
2385 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Symantec Workspace Streaming XML-RPC Arbitrary File Upload
This signature detects attempts to exploit a known vulnerability against Symantec Workspace. A successful attack can lead to the upload of an arbitrary file.
Extended Description
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.
Affected Products
- Symantec workspace_streaming 6.1
- Symantec workspace_streaming 7.5.0
References
- BugTraq: 67189
- CVE: CVE-2014-1649