Published: 07/12/2007 Updated: 08/03/2011

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote malicious users to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sonicwall global vpn client 3.1.556
sonicwall global vpn client 4.0.0.810

source: wwwsecurityfocuscom/bid/26689/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function Successfully exploiting this issue allows remote attackers to execute arbitrary machi ...

CWE-134 http://marc.info/?l=bugtraq&m=119678272603064&w=2 http://www.sec-consult.com/305.html http://www.securityfocus.com/bid/26689 http://secunia.com/advisories/27917 http://www.securitytracker.com/id?1019038 http://www.vupen.com/english/advisories/2007/4094 https://nvd.nist.gov https://www.exploit-db.com/exploits/30840/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6273

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect