CVE-2007-5814

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

CVE-2007-5603

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method...

CVE-2007-5815

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method...

Stack overflow

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method...

Buffer overflow

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

Path traversal

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method...

SonicWALL SSL VPN Client Remote ActiveX Multiple Vulnerabilities

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

SonicWALL SSL VPN Client Remote ActiveX Multiple Vulnerabilities

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method. CVE: CVE-2007-5603 Last updated: Sept...

SonicWALL SSL VPN Client Remote ActiveX Multiple Vulnerabilities

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method. CVE: CVE-2007-5815 Last...

CVE-2007-5603

CVE-2007-5603 is a stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control (before 2.1.0.51 and 2.5.x before 2.5.0.56). A remote attacker can cause arbitrary code execution by supplying a long string in the second argument to the AddRouteEntry method. The vul...

CVE-2007-5814

Affected product : SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control. Vulnerability : multiple buffer overflows enabling remote code execution via long Unicode properties in AddRouteEntry (serverAddress, sessionId, clientIPLower, clientIPHigher, userName, domainName, dnsSuffix). The AddR...

CVE-2007-5603

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method...

CVE-2007-5814

Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long 1 serverAddress, 2 sessionId, 3 clientIPLower, 4 clientIPHigher, 5 userName, 6 domainName, or 7...

CVE-2007-5815

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method...

CVE-2007-5815

This CVE describes an Absolute path traversal in the WebCacheCleaner ActiveX control (version 1.3.0.3) used by SonicWall SSL-VPN. Affected products: SSL-VPN 200 before 2.1 and SSL-VPN 2000/4000 before 2.5. The vulnerability allows remote attackers to delete arbitrary files by passing a full pathn...

SonicWALL SSL-VPN NetExtender NELaunchCtrl ActiveX Control Multiple Overflows

The remote host contains the 'NELaunchCtrl' ActiveX control included with the SonicWALL NetExtender VPN client software. The version of this control installed on the remote host fails to validate arguments to several methods, such as 'AddRouteEntry', 'serverAddress', 'sessionId', 'clientIPLower',...

sonicwall-remote.txt

var shellcode =...

SonicWall SSL VPN client multiple security vulnerabilities

Multiple vulnerabilities with different ActiveX elements...

SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client

SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...

SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow

Overview The SonicWall NetExtender NELaunchCtrl ActiveX control contains a stack buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SonicWall NetExtender is an SSL VPN client that is implemented by using an ActiveX...