Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.902104
Kategorie:Buffer overflow
Titel:TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability
Zusammenfassung:This host has TheGreenBow IPSec VPN Client installed and is prone to Stack; Overflow vulnerability.
Beschreibung:Summary:
This host has TheGreenBow IPSec VPN Client installed and is prone to Stack
Overflow vulnerability.

Vulnerability Insight:
The flaw is due to a boundary error when processing certain sections of
'tgb' (policy) files. Passing an overly long string to 'OpenScriptAfterUp' will trigger the overflow.

Vulnerability Impact:
Successful exploitation allows the attacker to execute arbitrary code on
the system or compromise a system.

Affected Software/OS:
TheGreenBow IPSec VPN Client version 4.65.003 and prior.

Solution:
Update to the most recent version.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2010-0392
BugTraq ID: 40387
http://www.securityfocus.com/bid/40387
Bugtraq: 20100121 TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 (Google Search)
http://www.securityfocus.com/archive/1/509091/100/0/threaded
http://www.senseofsecurity.com.au/advisories/SOS-10-001
http://osvdb.org/61866
http://secunia.com/advisories/38262
XForce ISS Database: ipsecvpnclient-tgb-bo(55793)
https://exchange.xforce.ibmcloud.com/vulnerabilities/55793
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.