CVE-2013-6021

CRITICAL 9.3CVE-2013-6021 · Published 19/10/2013 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

References

osvdb.org/98752
watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8 · Vendor Advisory
watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes · Vendor Advisory
exploit-db.com/exploits/29273 · Exploit
kb.cert.org/vuls/id/233990 · Patch
securityfocus.com/bid/63227 · Exploit
funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free