SA-20071101-0.txt

SEC Consult Security Advisory ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program: SonicWALL SSL-V...

SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution

var shellcode =...

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion

source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include arbitrary-file-deletion and multiple stack-based buffer-overflow vulnerabilities. Attackers can exploit these issue...

SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit

Exploit for unknown platform in category remote exploits ============================================================= SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit ============================================================= var shellcode =...

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion

SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include...

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution var shellcode =...

SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in SonicWall SSL-VPN NetExtender. By sending an overly long string to the "AddRouteEntry" method located in the NELaunchX.dll 1.0.0.26 Control, an attacker may be able to execute arbitrary code. Module Options msf use...

CVE-2002-2317

Memory leak in the 1 httpd, 2 nntpd, and 3 vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service memory consumption via an unknown method...

CVE-2002-2317

CVE-2002-2317 concerns VelociRaptor 1.0, indicating a memory leak in three components: httpd, nntpd, and the vpn driver. The underlying issue is a memory consumption DoS that can be triggered by remote attackers using an unknown method. Referenced sources (NVD, Red Hat, CVE listings) confirm the ...

CVE-2002-2317: Exposure of Sensitive Information to an Unauthorized Actor

Memory leak in the 1 httpd, 2 nntpd, and 3 vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service memory consumption via an unknown method...

CVE-2007-5562

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

CVE-2007-5562

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

CVE-2007-5562

The CVE-2007-5562 issue affects Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 . The vulnerable component is the login page at cgi-bin/welcome , exploitable via the err parameter in the context of an error page to trigger Cross-site Scripting (XSS) . The provided description indicates remote atta...

CVE-2007-5562: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/welcome aka the login page in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page...

NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting

NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/26073/info NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiti...

[Full-disclosure] Netgear SSL312 XSS vulnerability

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: NETGEAR SSL312 XSS VULNERABILITY || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date: October 2007 Contact:...

Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/26073/info NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attac...

netgear-xss.txt

----------------------------- || WWW.SMASH-THE-STACK.NET || ----------------------------- || ADVISORY: NETGEAR SSL312 XSS VULNERABILITY || 0x00: ABOUT ME || 0x01: DATELINE || 0x02: INFORMATION || 0x03: EXPLOITATION || 0x04: RISK LEVEL || 0x00: ABOUT ME Author: SkyOut Date: October 2007 Contact:...

Checkpoint VPN-1 / Firewall-1 multiple security vulnerabilities

Multiple buffer overflows / memory corruptions...

Check Point VPN-1/FireWall-1 4.1 SP2 Blocked Port Bypass Exploit

No description provided by source. / Summary A vulnerability exists in Check Point VPN-1/FireWall-1 4.1 SP2 that enables an attacker to establish connections to blocked TCP services through the firewall in certain configurations. We expect many deployed FireWall-1 installations to be immune to th...