National Cyber-Alert System

Vulnerability Summary for CVE-2007-5603

Overview

Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allows remote attackers to execute arbitrary code via a long string in the second argument to the AddRouteEntry method.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#298521

Name: VU#298521

Hyperlink:http://www.kb.cert.org/vuls/id/298521

External Source: XF

Name: sonicwall-nelaunchctrl-bo(38220)

Hyperlink:http://xforce.iss.net/xforce/xfdb/38220

External Source: SECTRACK

Name: 1018891

Hyperlink:http://www.securitytracker.com/id?1018891

External Source: BID

Name: 26288

Hyperlink:http://www.securityfocus.com/bid/26288

External Source: BUGTRAQ

Name: 20071101 SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALLSSL-VPN Client

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/483097/100/0/threaded

External Source: MISC

Name: http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt

Hyperlink:http://www.sec-consult.com/fileadmin/Advisories/20071101-0_sonicwall_multiple.txt

External Source: MISC

Name: http://www.sec-consult.com/303.html

Hyperlink:http://www.sec-consult.com/303.html

External Source: MILW0RM

Name: 4594

Hyperlink:http://www.milw0rm.com/exploits/4594

External Source: MISC

Name: http://www.kb.cert.org/vuls/id/WDON-78K56M

Hyperlink:http://www.kb.cert.org/vuls/id/WDON-78K56M

External Source: VUPEN

Name: ADV-2007-3696

Hyperlink:http://www.frsirt.com/english/advisories/2007/3696

External Source: SREASON

Name: 3342

Hyperlink:http://securityreason.com/securityalert/3342

External Source: SECUNIA

Name: 27469

Type: Advisory

Hyperlink:http://secunia.com/advisories/27469