CWE Code: 134
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Use of Externally-Controlled Format String
Summary: multiple format string vulnerabilities in the configuration file in sonicwall global vpn client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) hostname tag or the (2) name attribute in the connection tag.  note: there might not be any realistic circumstances in which this issue crosses privilege boundaries.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2007-12-07
Last Modified Date: 2011-03-08