SonicWALL Global Security Client Local Privilege Escalation Vulnerability

Bugtraq ID:	35094
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 26 2009 12:00AM
Updated:	May 26 2009 05:20PM
Credit:	lofi42
Vulnerable:	SonicWALL Global Security Client 1.0 .15
Not Vulnerable:

SonicWALL Global Security Client Local Privilege Escalation Vulnerability

SonicWALL Global Security Client is prone to a local privilege-escalation vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

Global Security Client 1.0.0.15 is vulnerable; other versions may also be affected.

SonicWALL Global Security Client Local Privilege Escalation Vulnerability

An attacker can use readily available tools to exploit this issue.

SonicWALL Global Security Client Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SonicWALL Global Security Client Local Privilege Escalation Vulnerability

References:

• SonicWALL Global Security Client Homepage (SonicWALL)
  
• SonicWALL Global Security Client Local Privilege Escalation Vulnerability (SEC Consult Security)
  
• SEC Consult SA-20090525-2 :: SonicWALL Global Security Client (Bernhard Mueller )