SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability

Title: ====== SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability Date: ===== 2011-10-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=196 VL-ID: ===== 196 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes Reporting-Too...

SonicWALL - 'SessId' Cookie Brute Force / Admin Session Hijacking

source: https://www.securityfocus.com/bid/49930/info SonicWall NSA 4500 is prone to an HTML-injection vulnerability and a session-hijacking vulnerability. Exploiting these issues can allow an attacker to hijack a user's session and gain unauthorized access to the affected application, or run...

SonicWall Viewpoint 6.0 SP2 Blind SQL Injection

Title: ====== SonicWall Viewpoint v6.0 SP2 - Blind SQL Injection Vulnerability Date: ===== 2011-10-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=196 VL-ID: ===== 196 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes...

SonicWALL Viewpoint 6.0 - scheduleID SQL Injection

SonicWALL Viewpoint 6.0 - scheduleID SQL Injection source: https://www.securityfocus.com/bid/49906/info SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SonicWALL Viewpoint 6.0 - 'scheduleID' SQL Injection

source: https://www.securityfocus.com/bid/49906/info SonicWall Viewpoint is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=196 Release Date: ============= 2011-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=196 Release Date: ============= 2011-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

Sonicwall Viewpoint 6.x Session Hijacking

Title: ====== Sonicwall Viewpoint v6.x - Multiple Web Vulnerabilities Date: ===== 2011-09-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=195 VL-ID: ===== 195 Introduction: ============= SonicWALL® ViewPoint™ ist ein benutzerfreundliches webbasiertes Reporting-Tool,...

CVE-2010-2583

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

Stack overflow

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method. CVE:...

CVE-2010-2583

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

CVE-2010-2583

The CVE-2010-2583 vulnerability affects SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller). It is a stack-based buffer overflow in the Install3rdPartyComponent method that can be triggered by excessively long CabURL and Location arguments, potentially allowi...

PT-2010-4128

Name of the Vulnerable Software and Affected Versions SonicWALL SSL-VPN End-Point Interrogator/Installer versions prior to 10.5.2 SonicWALL SSL-VPN End-Point Interrogator/Installer version 10.0.5 before hotfix 3 Description The issue is related to a stack-based buffer overflow in the ActiveX...

CVE-2010-2583: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control Aventail.EPInstaller before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long 1 CabURL and 2 Location arguments to the Install3rdPartyComponent method...

Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow

====================================================================== Secunia Research 29/10/2010 - SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control - - "Install3rdPartyComponent" Method Buffer Overflow - ======================================================================...

SonicWALL SSL-VPN ActiveX buffer overflow

Buffer overflow in SonicWALL SSL-VPN End-Point ActiveX Install3rdPartyComponent method...

SonicWALL SSL VPN End Point Interrogator Installer ActiveX Control

SonicWALL SSL VPN provides secure remote access to mission-critical resources from any endpoint including desktops, laptops, PDAs and smartphones. SonicWALL SSL VPN is bundled with a number of ActiveX controls such as, EPInstaller End Point Installer and EPInterrogator End Point Interrogator, tha...