SonicWall Global VPN Client Detection

This script detects the installed version of SonicWall Global VPN Client. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2162

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

SonicWALL Email Security Error Page Cross-Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page. CVE: CVE-2008-2162 Last updated: Aug. 8, 2017, 1:3...

CVE-2008-2162

Affected software : SonicWall Email Security 6.1.1. Vulnerability : Cross-site scripting (XSS) in error pages due to insufficient sanitization of the Host header in requests to non-existent pages. Impact : remote attackers could inject arbitrary web script or HTML when the error page is rendered....

CVE-2008-2162

Cross-site scripting XSS vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the Host header in a request to a non-existent web page, which is not properly sanitized in an error page...

sonicwall-xss.txt

Affected Software/Device: SonicWall E-mail Security Version: 6.1.1 Vulnerability: Cross Site Scripting Risk: Low Description: SonicWALL Email Security is award-winning anti-spam, anti-virus, anti-phishing, policy, and compliance management e-mail protection solution. Available as a hardened...

SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting

SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data i...

SonicWALL Email Security 6.1.1 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/29107/info SonicWALL Email Security is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input when displaying URI address data in an error page. An attacker may leverage this issue to execute...

SonicWALL Global VPN Client Detection

The SonicWALL Global VPN Client is installed on the remote system. This software can be used to establish secure remote connections. Script Written By Ferdy Riphagen Script distributed under the GNU GPLv2 License. Tenable grants a special exception for this plugin to use the library 'smbfunc.inc'...

CVE-2007-6273

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the 1 Hostname tag or the 2 name attribute in the Connection tag. NOTE: there might...

Format string

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the 1 Hostname tag or the 2 name attribute in the Connection tag. NOTE: there might...

SonicWALL Global VPN Client Remote Format String Vulnerability

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the 1 Hostname tag or the 2 name attribute in the Connection tag. NOTE: there might...

CVE-2007-6273

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the 1 Hostname tag or the 2 name attribute in the Connection tag. NOTE: there might...

CVE-2007-6273

The CVE-2007-6273 issue affects SonicWALL Global VPN Client versions 3.1.556 and 4.0.0.810, where the configuration file’s formatting strings in the Hostname tag and the Connection tag name attribute can be exploited by a user-assisted remote attacker to execute arbitrary code. The vulnerability ...

KLA10335 ACE vulnerability in SonicWall Global VPN client

Format string vulnerabilities were found in the SonicWall Global VPN client. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via specially designed format strings. Original advisories - Related products...

SEC Consult SA-20071204-0 :: SonicWALL Global VPN Client Format String Vulnerability

SEC Consult Security Advisory 20071204-0 ===================================================================================== title: SonicWALL Global VPN Client Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: 4.0.0.830 homepage: www.sonicwall.com found:...

SonicWALL Global VPN Client format string vulnerability

Format stirng vulnerability on configuration file parsing...

SonicWALL Global VPN Client 4.0.782 - Remote Format String

SonicWALL Global VPN Client 4.0.782 - Remote Format String source: https://www.securityfocus.com/bid/26689/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a...

SonicWALL Global VPN Client 4.0.782 - Remote Format String

source: https://www.securityfocus.com/bid/26689/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...

SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit

No description provided by source. !-- SonicWall SSL-VPN NeLaunchCtrl ActiveX Control exploit. by krafty greets to SK, muts, halvar, grugq, and all the ethnical hackers sux to exploit traders - ZDI, WabiSabiLabi, and all you h0arders. Bring back the days of technotronic and r00tshell! Freedom...