CVEvulnerability
CVE-2013-6021
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.
Affected configurations
• watchguard fireware (<= 11.7.4)
• watchguard fireware 11.0.2
• watchguard fireware 11.1
• watchguard fireware 11.2.3
• watchguard fireware 11.3
• watchguard fireware 11.3.6
• watchguard fireware 11.4
• watchguard fireware 11.4.2
• watchguard fireware 11.5.1
• watchguard fireware 11.5.3
• watchguard fireware 11.6.6
• watchguard fireware 11.7.2
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/98752 osvdb.org
- http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/ Vendor Advisory
- http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/ Vendor Advisory
- http://www.exploit-db.com/exploits/29273 Exploit
- http://www.kb.cert.org/vuls/id/233990 Patch, US Government Resource
- http://www.securityfocus.com/bid/63227 Exploit
- https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/ Exploit
- http://osvdb.org/98752 osvdb.org
- http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8/ Vendor Advisory
- http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes/ Vendor Advisory
- http://www.exploit-db.com/exploits/29273 Exploit
- http://www.kb.cert.org/vuls/id/233990 Patch, US Government Resource
- http://www.securityfocus.com/bid/63227 Exploit
- https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit/ Exploit