SonicWALL SSL-VPN - 'cgi-bin/welcome/VirtualOffice' Remote Format String

source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Attackers may exploit th...

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String

SonicWALL SSL-VPN - cgi-binwelcomeVirtualOffice Remote Format String source: https://www.securityfocus.com/bid/35145/info Multiple SonicWALL SSL-VPN devices are prone to a remote format-string vulnerability because they fail to properly sanitize user-supplied input before passing it as the format...

SonicWALL Global安全客户端本地特权提升漏洞

Bugraq ID: 35094 CNCAN ID：CNCAN-2009052704 SonicWALL Global Security Client是一款多个SonicWALL设备上的全局安全客户端软件。 SonicWALL Global Security Client存在设计错误，本地攻击者可以利用漏洞提升特权。 当从系统托盘Applet中访问GSC属性时不正确丢弃SYSTEM权限。通过右击系统托盘图标，选择"Log"，右击"Event Viewer", "Open Log...

SonicWALL Global VPN客户端'RampartSvc'本地特权提升漏洞

Bugraq ID: 35092 CNCAN ID：CNCAN-2009052705 SonicWALL Global VPN Client是一款许移动用户建立到SonicWALL VPN网关安全连接的应用程序。 SonicWALL Global VPN Client安装时设置权限不正确，本地攻击者可以利用漏洞提升特权。 在SonicWALL Global VPN Client安装中，安装文件夹"%ProgramFiles%\SonicWALL\SonicWALL Global VPN...

SonicWALL Global Security Client privilege escalation

SYSTEM privileges are not dorpped on file open dialog...

SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability

SEC Consult Security Advisory 20090525-2 ========================================================================== title: SonicWALL Global Security Client Local Privilege Escalation Vulnerability program: SonicWALL Global Security Client vulnerable version: 1.0.0.15 and possibly other versions...

SonicWALL Global VPN Client < 4.0.0.830 Format String Vulnerabilities

The version of the SonicWALL Global VPN Client software installed on the remote Windows host fails to sanitize the 'name' attribute of the 'Connection' tag and the content of the 'Hostname' tag in the configuration file of format strings. If an attacker can trick a user on the affected host into...

SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability

SEC Consult Security Advisory 20090525-4 ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions...

SonicOS Format String

SEC Consult Security Advisory ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions homepage:...

SonicWALL Global VPN Client weak file permissions

Everyone:Full Control permission on application folder...

SonicWALL Global VPN Client Privilege Escalation

SEC Consult Security Advisory ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other versions...

SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability

SEC Consult Security Advisory 20090525-3 ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other...

SonicWALL Global Security Client Privilege Escalation

SEC Consult Security Advisory ========================================================================== title: SonicWALL Global Security Client Local Privilege Escalation Vulnerability program: SonicWALL Global Security Client vulnerable version: 1.0.0.15 and possibly other versions homepage:...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

SonicWALL Global VPN Client 4.0 - Log File Remote Format String source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to ...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...

CVE-2008-4918

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

SonicWALL Content Filtering Blocked Site Error Page Cross-Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

Cross site scripting

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4918

Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...

CVE-2008-4918

SonicWALL SonicOS Enhanced (pre-4.0.1.1) on SonicWALL Pro 2040 and TZ 180/190 is affected by an XSS vulnerability in the Content Filtering (CFS) block page. A crafted URL to a blocked site can cause arbitrary web script or HTML to be injected into the target’s browser, enabling universal website ...