Test ID:	1.3.6.1.4.1.25623.1.0.902104
Category:	Buffer overflow
Title:	TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability
Summary:	TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability.
Description:	Summary: TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability. Vulnerability Insight: The flaw is due to a boundary error when processing certain sections of 'tgb' (policy) files. Passing an overly long string to 'OpenScriptAfterUp' will trigger the overflow. Vulnerability Impact: Successful exploitation allows the attacker to execute arbitrary code on the system or compromise a system. Affected Software/OS: TheGreenBow IPSec VPN Client version 4.65.003 and prior. Solution: Update to the most recent version. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0392 BugTraq ID: 40387 http://www.securityfocus.com/bid/40387 Bugtraq: 20100121 TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001 (Google Search) http://www.securityfocus.com/archive/1/509091/100/0/threaded http://www.senseofsecurity.com.au/advisories/SOS-10-001 http://osvdb.org/61866 http://secunia.com/advisories/38262 XForce ISS Database: ipsecvpnclient-tgb-bo(55793) https://exchange.xforce.ibmcloud.com/vulnerabilities/55793
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.