Dell SonicWALL Extender Unquoted Search Path Lets Local Users Gain Elevated Privileges : 8/28/2015 9:38:15 PM
 | Communicate with co-workers in real time. Used by Netflix, Dropbox & Salesforce. $0/unlimited users. Get started >> From our sponsors  |
| Vulnerability Databse |
| This module replaces the description field of a feed to the page it links to (in addition, it wipes out the content:encoded field), so you can get its full text. |
Dell SonicWALL Extender Unquoted Search Path Lets Local Users Gain Elevated Privileges
8/28/2015 12:00:00 AM
| Dell SonicWALL Extender Unquoted Search Path Lets Local Users Gain Elevated Privileges |
| SecurityTracker Alert ID: 1033417 |
| SecurityTracker URL: http://securitytracker.com/id/1033417 |
| CVE Reference: GENERIC-MAP-NOMATCH (Links to External Site) |
| Date: Aug 28 2015 |
| Impact: Execution of arbitrary code via local system, User access via local system |
| Fix Available: Yes Vendor Confirmed: Yes |
| Version(s): NetExtender 7.5.215 |
| Description: A vulnerability was reported in Dell SonicWALL Extender. A local user can obtain elevated privileges on the target system. A local user can place a specially crafted file in a specific system directory on the target user's system. When the software is installed via autorun, the file will be executed with the privileges of the target administrative user. The vendor was notified on May 24, 2015. Andrew Smith of Sword & Shield Enterprise Security reported this vulnerability. |
| Impact: A local user can obtain elevated privileges on the target system. |
| Solution: The vendor has issued a firmware fix (7.5.1.2-40sv, 8.0.0.3-23sv). The vendor's advisory is available at: https://support.software.dell.com/product-notification/157537 |
| Vendor URL: support.software.dell.com/product-notification/157537 (Links to External Site) |
| Cause: Access control error |
| Underlying OS: |
| |
| Message History: None. |
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions
