SonicWALL Global VPN Client 'RampartSvc' Local Privilege Escalation Vulnerability

Bugtraq ID:	35092
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 26 2009 12:00AM
Updated:	May 26 2009 05:30PM
Credit:	lofi42
Vulnerable:	SonicWALL Global VPN Client 4.0 .830 SonicWALL Global VPN Client 4.0 .782 SonicWALL Global VPN Client 4.0 .2-51e Standard SonicWALL Global VPN Client 4.0 .2-51e Enhanced SonicWALL Global VPN Client 4.0.0.835
Not Vulnerable:

SonicWALL Global VPN Client 'RampartSvc' Local Privilege Escalation Vulnerability

SonicWALL Global VPN Client is prone to a local privilege-escalation vulnerability.

Successfully exploiting this issue allows local users to execute arbitrary code with LocalSystem privileges, facilitating the complete compromise of affected computers.

Global VPN Client 4.0.0.835 is vulnerable; other versions may also be affected.

SonicWALL Global VPN Client 'RampartSvc' Local Privilege Escalation Vulnerability

No specific exploit code is required; an attacker with local interactive access can exploit this issue.

SonicWALL Global VPN Client 'RampartSvc' Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SonicWALL Global VPN Client 'RampartSvc' Local Privilege Escalation Vulnerability

References:

• SonicWALL Global VPN Client Homepage (SonicWALL)
  
• SonicWALL Global VPN Client Local Privilege Escalation (SonicWall)