CVE-2010-0392

2010-01-2618:30:01

CWE-119

[email protected]

web.nvd.nist.gov

cve

2010

0392

buffer overflow

thegreenbow

vpn client

security vulnerability

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.314 Low

EPSS

Percentile

97.0%

JSON

Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to “phase 2.”

Affected configurations

NVD

Node

thegreenbowipsec_vpn_clientMatch4.51.001

thegreenbowipsec_vpn_clientMatch4.65.003

CPENameOperatorVersion
thegreenbow:ipsec_vpn_clientthegreenbow ipsec vpn clienteq4.51.001
thegreenbow:ipsec_vpn_clientthegreenbow ipsec vpn clienteq4.65.003