PT-2010-4128 · Sonicwall · Sonicwall Ssl-Vpn End-Point Interrogator/Installer+1

Publicado 2010-11-03 · Atualizado 2018-10-10 · CVE-2010-2583

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SonicWALL SSL-VPN End-Point Interrogator/Installer versions prior to 10.5.2 SonicWALL SSL-VPN End-Point Interrogator/Installer version 10.0.5 before hotfix 3

Description The issue is related to a stack-based buffer overflow in the ActiveX control Aventail.EPInstaller. This can be exploited by remote attackers to execute arbitrary code via long arguments to the Install3rdPartyComponent method, specifically the CabURL and Location arguments.

Recommendations For versions prior to 10.5.2, update to version 10.5.2 or later. For version 10.0.5, apply hotfix 3 or later. As a temporary workaround, consider restricting access to the Install3rdPartyComponent method until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2583

Produtos afetados

Aventail.Epinstaller

Sonicwall Ssl-Vpn End-Point Interrogator/Installer

Referências · 8

• http://secunia.com/advisories/41644 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62865 · Nota
• http://securitytracker.com/id?1024666 · Nota
• http://securityfocus.com/archive/1/514561/100/0/threaded · Nota
• http://secunia.com/secunia_research/2010-117 · Aviso do Fabricante
• http://securityfocus.com/bid/44535 · Nota
• http://software.sonicwall.com/Aventail/KB/hotfix/10.0.5/clt-hotfix-10_0_5-003.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2583 · Nota de Segurança