2089 matches found
CVE-2007-5815
Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method...
SonicWALL SSL-VPN NetExtender NELaunchCtrl ActiveX Control Multiple Overflows
The remote host contains the 'NELaunchCtrl' ActiveX control included with the SonicWALL NetExtender VPN client software. The version of this control installed on the remote host fails to validate arguments to several methods, such as 'AddRouteEntry', 'serverAddress', 'sessionId', 'clientIPLower',...
sonicwall-remote.txt
var shellcode =...
SonicWall SSL VPN client multiple security vulnerabilities
Multiple vulnerabilities with different ActiveX elements...
SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client
SEC Consult Security Advisory 20071101-0 ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program:...
SonicWall NetExtender NELaunchCtrl ActiveX control stack buffer overflow
Overview The SonicWall NetExtender NELaunchCtrl ActiveX control contains a stack buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SonicWall NetExtender is an SSL VPN client that is implemented by using an ActiveX...
SonicWall SSL-VPN NetExtender ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in SonicWall SSL-VPN NetExtender. By sending an overly long string to the "AddRouteEntry" method located in the NELaunchX.dll 1.0.0.26 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include...
SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution
SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution var shellcode =...
SonicWALL SSL-VPN - 'NeLaunchCtrl' ActiveX Control Remote Command Execution
var shellcode =...
SonicWALL SSL VPN 1.3 3 WebCacheCleaner - ActiveX FileDelete Method Traversal Arbitrary File Deletion
source: https://www.securityfocus.com/bid/26288/info SonicWALL SSL VPN Client is prone to multiple remote vulnerabilities. The issues occur in different ActiveX controls and include arbitrary-file-deletion and multiple stack-based buffer-overflow vulnerabilities. Attackers can exploit these issue...
SA-20071101-0.txt
SEC Consult Security Advisory ===================================================================================== title: Multiple vulnerabilities in SonicWALL SSL-VPN Client Deletion of arbitrary files on the client Arbitrary code execution thru various buffer overflows program: SonicWALL SSL-V...
SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit
Exploit for unknown platform in category remote exploits ============================================================= SonicWall SSL-VPN NeLaunchCtrl ActiveX Control Remote Exploit ============================================================= var shellcode =...
CVE-2002-2341
Cross-site scripting XSS vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL...
CVE-2003-1490
CVE-2003-1490 affects SonicWall Pro devices running firmware 6.4.0.1. The vulnerability allows remote attackers to trigger a denial of service (device reset) by sending a long HTTP POST to the internal interface, likely due to a buffer overflow. The available documents describe the affected produ...
CVE-2003-1490
SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service device reset via a long HTTP POST to the internal interface, possibly due to a buffer overflow...
CVE-2003-1320
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long payload...
CVE-2003-1320
SonicWALL firmware before 6.4.0.1 is affected by CVE-2003-1320, where crafted IKE responses (notably large SPI, many payloads, or long payload) can cause denial of service and potentially allow arbitrary code execution. Impact: DoS with possible code execution; remediation is upgrading to firmwar...