SonicWALL - 'SessId' Cookie Brute Force / Admin Session Hijacking

source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gain unauthorized access to the affected application, or run...

SonicWall Viewpoint 6.0 SP2 Blind SQL Injection

Title: ====== SonicWall Viewpoint v6.0 SP2 - Blind SQL Injection Vulnerability Date: ===== 2011-10-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=196 VL-ID: ===== 196 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes...

SonicWALL Viewpoint 6.0 - scheduleID SQL Injection

SonicWALL Viewpoint 6.0 - scheduleID SQL Injection source: https://www.securityfocus.com/bid/49906/info SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SonicWALL Viewpoint 6.0 - 'scheduleID' SQL Injection

source: https://www.securityfocus.com/bid/49906/info SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=196 Release Date: ============= 2011-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=196 Release Date: ============= 2011-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

Sonicwall Viewpoint 6.x Session Hijacking

Title: ====== Sonicwall Viewpoint v6.x - Multiple Web Vulnerabilities Date: ===== 2011-09-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=195 VL-ID: ===== 195 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes Reporting-Tool,...

SonicWALL SSL-VPN Format String Vulnerability

There is a format string vulnerability within the SonicWALL SSL-VPN Appliance - 200, 2000 and 4000 series. Arbitrary memory can be read or written to, depending on the format string used. There appears to be a length limit of 127 characters of format string data. With physical access to the devic...

CVE-2010-2583

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

Stack overflow

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method. CVE:...

CVE-2010-2583

The CVE-2010-2583 vulnerability affects SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller). It is a stack-based buffer overflow in the Install3rdPartyComponent method that can be triggered by excessively long CabURL and Location arguments, potentially allowi...

CVE-2010-2583

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

SonicWALL SSL-VPN ActiveX buffer overflow

Buffer overflow in SonicWALL SSL-VPN End-Point ActiveX Install3rdPartyComponent method...

Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow

====================================================================== Secunia Research 29/10/2010 - SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control - - "Install3rdPartyComponent" Method Buffer Overflow - ======================================================================...

SonicWALL SSL VPN End Point Interrogator Installer ActiveX Control

SonicWALL SSL VPN provides secure remote access to mission-critical resources from any endpoint including desktops, laptops, PDAs and smartphones. SonicWALL SSL VPN is bundled with a number of ActiveX controls such as, EPInstaller End Point Installer and EPInterrogator End Point Interrogator, tha...

SonicWALL Aventail - 'epi.dll' AuthCredential Format String (Metasploit)

$Id: aventailepiactivex.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SonciWALL Aventail epi.dll AuthCredential Format String Exploit

$Id: aventailepiactivex.rb 10078 2010-08-20 11:36:50Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...