1545 matches found
CVE-2007-5815
Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method...
CVE-2007-5814
Affected product : SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control. Vulnerability : multiple buffer overflows enabling remote code execution via long Unicode properties in AddRouteEntry (serverAddress, sessionId, clientIPLower, clientIPHigher, userName, domainName, dnsSuffix). The AddR...
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...
sonicwall-remote.txt
var shellcode =...
SonicWall SSL VPN client multiple security vulnerabilities
Multiple vulnerabilities with different ActiveX elements...
SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow
Overview The SonicWall NetExtender NELaunchCtrl ActiveX control contains a stack buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SonicWall NetExtender is an SSL VPN client that is implemented by using an ActiveX...
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in SonicWall SSL-VPN NetExtender. By sending an overly long string to the "AddRouteEntry" method located in the NELaunchX.dll 1.0.0.26 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include...
SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution
SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution var shellcode =...
SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution
var shellcode =...
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion
source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include arbitrary-file-deletion and multiple stack-based buffer-overflow vulnerabilities. Attackers can exploit these issue...
SA-20071101-0.txt
SEC Consult Security Advisory ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program: SonicWALL SSL-V...
SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit
Exploit for unknown platform in category remote exploits ============================================================= SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit ============================================================= var shellcode =...
CVE-2007-5562
Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...
NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting
NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/26073/info NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiti...
Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/26073/info NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attac...
Juniper Networks IVE OS LDAP Referrals TLS明文密码漏洞
Juniper IVE OS是一款即时虚拟外网技术，用于安全访问SSL VPN设备。 使用TLS的Juniper IVE OS存在密码泄露问题，远程攻击者可以利用漏洞获得明文密码信息对系统进行进一步攻击。 攻击者可以通过嗅探网络通信获得用户敏感信息。目前没有详细漏洞细节提供。 Juniper Networks IVE OS 6.0 Juniper Networks IVE OS 5.4 目前没有详细解决方案提供： http://www.juniper.net...
F5 FirePass 4100 SSL VPN My.Activiation.PHP3远程命令注入漏洞
F5's FirePass SSL VPN提供使用标准WEB浏览器对应用程序和数据进行安全访问的解决方案。 F5 FirePass 4100不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'my.activation.php3'脚本对用户提交的'username'参数缺少过滤，在部分条件下允许用户注入Linux SHELL命令，导致以WEB权限执行。 F5 FirePass 4100 厂商解决方案 可参考如下安全公告获得补丁信息： https://tech.f5.com/home/solutions/sol167.html...
