CVE

Id
29171  
CVE No.
CVE-2007-5814  
Status
Candidate  
Description
Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allow remote attackers to execute arbitrary code via a long (1) serverAddress, (2) sessionId, (3) clientIPLower, (4) clientIPHigher, (5) userName, (6) domainName, or (7) dnsSuffix Unicode property value. NOTE: the AddRouteEntry vector is covered by CVE-2007-5603.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306016 29171 CVE-2007-5814 BUGTRAQ:20071101 SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALLSSL-VPN Client  View
306017 29171 CVE-2007-5814 URL:http://www.securityfocus.com/archive/1/archive/1/483097/100/0/threaded  View
306018 29171 CVE-2007-5814 MISC:http://www.sec-consult.com/303.html  View
306019 29171 CVE-2007-5814 MISC:http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt  View
306020 29171 CVE-2007-5814 BID:26288  View
306021 29171 CVE-2007-5814 URL:http://www.securityfocus.com/bid/26288  View
306022 29171 CVE-2007-5814 VUPEN:ADV-2007-3696  View
306023 29171 CVE-2007-5814 URL:http://www.vupen.com/english/advisories/2007/3696  View
306024 29171 CVE-2007-5814 SECUNIA:27469  View
306025 29171 CVE-2007-5814 URL:http://secunia.com/advisories/27469  View
306026 29171 CVE-2007-5814 SREASON:3342  View
306027 29171 CVE-2007-5814 URL:http://securityreason.com/securityalert/3342  View
306028 29171 CVE-2007-5814 XF:sonicwall-nelaunchctrl-bo(38220)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54174 JVNDB-2007-002866 CONTENTCustomizer の dialog.php における重要な作成者の資格情報を取得される脆弱性 CONTENTCustomizer の dialog.php には、重要な作成者の資格情報を取得される脆弱性が存在します。 CVE-2007-5816 29171 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002866.html  View