CVE-2007-5815: sonicwall ssl_vpn_200 Path Traversal

Vulnerability summary

CVE-2007-5815 is a high (CVSS 10.0) Path Traversal vulnerability in sonicwall ssl_vpn_200. EPSS estimates a 4.53% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 05-11-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4000 before 2.5, allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method.

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.