CVE-2007-5815 Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary....
HighCVSS 10.0
EPSS 4.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SonicWall ssl vpn 200 | <= 2.1 | No fix listed |
| SonicWall ssl vpn20004000 | <= 2.5 | No fix listed |
References
- 27469 third-party-advisory vendor-advisory
- 3342 third-party-advisory
- www.sec-consult.com exploit
- www.sec-consult.com
- 20071101 SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALLSSL-VPN Client mailing-list
- 26288 exploit vdb-entry
- ADV-2007-3696 vdb-entry
- sonicwall-webcachecleaner-file-delete(38221) vdb-entry