CVE-2006-0522

Symantec Sygate Management Server <= 4.1 build 1417 - SQL Injection via Authentication Servlet

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-0522. PoCs published by Nicob.

AI-analyzed exploit summary This exploit leverages an unauthenticated SQL injection vulnerability in Sygate Management Server v4.1 to create/modify admin accounts or reset passwords via crafted HTTP requests. It uses SHA-1 hashing for password generation and targets the login servlet.

Description

SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Nicob · webappscgi
https://www.exploit-db.com/exploits/1680

This exploit leverages an unauthenticated SQL injection vulnerability in Sygate Management Server v4.1 to create/modify admin accounts or reset passwords via crafted HTTP requests. It uses SHA-1 hashing for password generation and targets the login servlet.

Classification
Working Poc 100%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Sygate Management Server v4.1
No auth needed
Prerequisites: Network access to the admin interface (HTTP) · Digest::SHA1 Perl module
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015561
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16452
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18689
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24413
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/22883
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0402

Scores

EPSS 0.0276
EPSS Percentile 84.4%

Details

Status published
Products (5)
symantec/sygate_management_server 3.5_mr_3_build_894_english
symantec/sygate_management_server 4.0_mr_1_build_1104_english
symantec/sygate_management_server 4.1_ga_build_1258_japanese
symantec/sygate_management_server 4.1_mr1_build_1351_chinese
symantec/sygate_management_server < 4.1_mr_2_build_1417_english
Published Feb 02, 2006
Tracked Since Feb 18, 2026