rapid7/metasploit-framework — pull request #421 by wchen-r7 (2012-05-28 03:49:41+00:00)
Title: Add CVE-2012-0297 Symantec Web Gateway

This module exploits a vulnerability found in Symantec Web Gateway's HTTP service. By injecting PHP code in the access log, it is possible to load it with a directory traversal flaw, which allows remote code execution under the context of 'apache'. Please note that it may take a few minutes to get a shell back. (5 min max, but I think 3 or 4 is usually when I get a shell back)