PT-2010-4128 · Sonicwall · Sonicwall Ssl-Vpn End-Point Interrogator/Installer+1

Published 2010-11-03 · Updated 2018-10-10 · CVE-2010-2583

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SonicWALL SSL-VPN End-Point Interrogator/Installer versions prior to 10.5.2 SonicWALL SSL-VPN End-Point Interrogator/Installer version 10.0.5 before hotfix 3

Description The issue is related to a stack-based buffer overflow in the ActiveX control Aventail.EPInstaller. This can be exploited by remote attackers to execute arbitrary code via long arguments to the Install3rdPartyComponent method, specifically the CabURL and Location arguments.

Recommendations For versions prior to 10.5.2, update to version 10.5.2 or later. For version 10.0.5, apply hotfix 3 or later. As a temporary workaround, consider restricting access to the Install3rdPartyComponent method until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2583

Affected Products

Aventail.Epinstaller

Sonicwall Ssl-Vpn End-Point Interrogator/Installer

References · 8

• http://secunia.com/advisories/41644 · Vendor Advisory
• http://secunia.com/secunia_research/2010-117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2583 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62865 · Note
• http://securitytracker.com/id?1024666 · Note
• http://securityfocus.com/archive/1/514561/100/0/threaded · Note
• http://securityfocus.com/bid/44535 · Note
• http://software.sonicwall.com/Aventail/KB/hotfix/10.0.5/clt-hotfix-10_0_5-003.txt · Note