Unscored severity · published Dec 7, 2007
CVE-2007-6273
Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary…
–
CVSS
6.2%
EPSS
No
On KEV
Description
Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GV
Global Vpn Client · Sonicwall
3.1.556; 4.0.0.810 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6273
Exploit
http://marc.info/?l=bugtraq&m=119678272603064&w=2
Vendor Advisory
http://secunia.com/advisories/27917
Exploit
http://www.sec-consult.com/305.html
Exploit
http://www.securityfocus.com/bid/26689
www.securitytracker.com
http://www.securitytracker.com/id?1019038
www.vupen.com
http://www.vupen.com/english/advisories/2007/4094
More from Global Vpn Client
8.6
CVE-2020-5145
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability
7.8
CVE-2021-20051
SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components
7.8
CVE-2021-20047
SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability
7.8
CVE-2021-20037
SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command…
7.8
CVE-2020-5144
SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability