SonicWALL Aventail - 'epi.dll' AuthCredential Format String (Metasploit)

$Id: aventailepiactivex.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SonicWALL SSL VPN End Point Interrogator Installer ActiveX Control

SonicWALL SSL VPN provides secure remote access to mission-critical resources from any endpoint including desktops, laptops, PDAs and smartphones. SonicWALL SSL VPN is bundled with a number of ActiveX controls such as, EPInstaller End Point Installer and EPInterrogator End Point Interrogator, tha...

SonicWALL Aventail epi.dll AuthCredential Format String

This module exploits a format string vulnerability within version 10.0.4.x and 10.5.1 of the SonicWALL Aventail SSL-VPN Endpoint Interrogator/Installer ActiveX control epi.dll. By calling the 'AuthCredential' method with a specially crafted Unicode format string, an attacker can cause memory...