CVE-2007-5815

Currently unrated

Key Information:

Vendor
Sonicwall
Status
Ssl Vpn2000\/4000
Ssl Vpn 200
Vendor
CVE Published:
5 November 2007

Summary

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.

References

http://www.vupen.com/english/advisories/2007/3696
vdb-entryx_refsource_VUPEN
http://www.sec-consult.com/fileadmin/Advisories/20071101-...
x_refsource_MISC
http://securityreason.com/securityalert/3342
third-party-advisoryx_refsource_SREASON

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.