Unrated severityNVD Advisory· Published Dec 7, 2007· Updated Apr 23, 2026
CVE-2007-6273
CVE-2007-6273
Description
Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string specifiers in the (1) Hostname tag or the (2) name attribute in the Connection tag. NOTE: there might not be any realistic circumstances in which this issue crosses privilege boundaries.
Affected products
2cpe:2.3:a:sonicwall:global_vpn_client:3.1.556:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sonicwall:global_vpn_client:3.1.556:*:*:*:*:*:*:*
- cpe:2.3:a:sonicwall:global_vpn_client:4.0.0.810:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- marc.infonvdExploit
- www.sec-consult.com/305.htmlnvdExploit
- www.securityfocus.com/bid/26689nvdExploit
- secunia.com/advisories/27917nvdVendor Advisory
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/4094nvd
News mentions
0No linked articles in our index yet.