Description
Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to "phase 2."
References
- http://www.senseofsecurity.com.au/advisories/SOS-10-001
- ipsecvpnclient-tgb-bo(55793) vdb-entry
- 38262 third-party-advisory
- 40387 vdb-entry
- http://www.thegreenbow.com/download.php?id=1000150
- 61866 vdb-entry
- 20100121 TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 mailing-list