Computer Security
[EN] securityvulns.ru no-pyccku


Dell SonicWall NetExtender privilege escalation
Published:24.08.2015
Source:
SecurityVulns ID:14665
Type:local
Threat Level:
4/10
Description:Binary planting vulnerability.
Affected:DELL : SonicWall NetExtender 7.5
CVE:CVE-2015-4173 (Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.)
Original documentdocumentajs_(at)_swordshield.com, Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation (24.08.2015)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod