CVE:CVE-2007-5815
CNNVD:CNNVD-200711-040
SonicWALL SSL-VPN可以为企业网络提供简单易用的VPN解决方案。
SonicWALL SSL-VPN解决方案所安装的WebCacheCleaner ActiveX控件的FileDelete()方式没有正确地验证某些参数，攻击者通过一个绝对路径参数实现删除客户端上的任意文件
solution:Upgrade sonicwall ssl_vpn_200 to a higher version than 2.1,and avoid the version (,2.1]; Upgrade sonicwall ssl_vpn2000/4000 to a higher version than 2.5,and avoid the version (,2.5]