SonicWALL Global Security Client privilege escalation
Published:		27.05.2009
Source:		BUGTRAQ
SecurityVulns ID:		9944
Type:		local
Level:		5/10
Description:		SYSTEM privileges are not dorpped on file open dialog.

Affected:

SONICWALL : SonicWALL Global Security Client 1.0

Original document

Daniel Fabian, SEC Consult SA-20090525-2 :: SonicWALL Global Security Client Local Privilege Escalation Vulnerability (27.05.2009)

Discuss:

Read or add your comments to this news (0 comments)

SonicWALL Global VPN Client weak file permissions
Published:		27.05.2009
Source:		BUGTRAQ
SecurityVulns ID:		9943
Type:		local
Level:		5/10
Description:		Everyone:Full Control permission on application folder.

Affected:

SONICWALL : SonicWALL Global VPN Client 4.0

Original document

Daniel Fabian, SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability (27.05.2009)

Discuss:

Read or add your comments to this news (0 comments)

SonicWALL format string vulnerability updated since 27.05.2009
Published:		01.06.2009
Source:		BUGTRAQ
SecurityVulns ID:		9942
Type:		remote
Level:		7/10
Description:		Format stirng vulnerability on server log parsing and during authentication.

Affected:		SONICWALL : SonicOS 4.0
		SONICWALL : SonicWALL SSL-VPN 2000
		SONICWALL : SonicWALL SSL-VPN 4000
		SONICWALL : SonicWALL SSL-VPN 200

Original document		Patrick Webster, SonicWALL SSL-VPN Appliance Format String Vulnerability (01.06.2009)
		Daniel Fabian, SEC Consult SA-20090525-4 :: SonicOS Format String Vulnerability (27.05.2009)

Discuss:

Read or add your comments to this news (0 comments)