CVE-2007-5815

Name of the Vulnerable Software and Affected Versions SonicWall SSL-VPN 200 versions prior to 2.1 SonicWall SSL-VPN 2000/4000 versions prior to 2.5 WebCacheCleaner ActiveX control version 1.3.0.3

Description The issue allows remote attackers to delete arbitrary files via a full pathname in the argument to the FileDelete method. This is due to an absolute path traversal vulnerability in the WebCacheCleaner ActiveX control.

Recommendations For SonicWall SSL-VPN 200 versions prior to 2.1, update to version 2.1 or later. For SonicWall SSL-VPN 2000/4000 versions prior to 2.5, update to version 2.5 or later. For WebCacheCleaner ActiveX control version 1.3.0.3, consider disabling the FileDelete method until a patch is available.