SafeNet SoftRemote 10.8.5 (Build 2) Local Buffer Overflow

2009.11.10
Risk: High
Local: Yes
Remote: No
CWE: CWE-119


CVSS Base Score: 6.9/10
Impact Subscore: 10/10
Exploitability Subscore: 3.4/10
Exploit range: Local
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: Complete
Availability impact: Complete

SafeNet SoftRemote Local Buffer Overflow - Security Advisory - SOS-09-008 Release Date. 30-Oct-2009 Vendor Notification Date. 20-Jul-2009 Product. SafeNet SoftRemote Platform. Microsoft Windows Affected versions. 10.8.5 (Build 2), 10.3.5 (Build 6) verified and possibly others. Other vendors which have OEM'd the client. Severity Rating. High Impact. System access Attack Vector. Local Solution Status. Fixed in 10.8.9 (unverified) CVE reference. Not currently assigned Details. SafeNet SoftRemote is an IPsec VPN client that sets up a secure channel for data transport. The application is a popular VPN client which has been OEM'd by many other companies. As a result this vulnerability affects a number of products and vendors. SafeNet SoftRemote is vulnerable to a local stack based buffer overflow which can lead to the compromise of a vulnerable system. The vulnerability is caused due to a boundary error when processing certain sections of spd (policy) files. Passing an overly long string to either "TREENAME" or "GROUPNAME" will trigger the overflow. Successful exploitation results in the execution of arbitrary code. Solution. Fixed in 10.8.9 (unverified). Discovered by. Brett Gervasoni from SOS Labs. About us. Sense of Security is a leading provider of information security and risk management solutions. Our team has expert skills in assessment and assurance, strategy and architecture, and deployment through to ongoing management. We are Australia's premier application penetration testing firm and trusted IT security advisor to many of the countries largest organisations. Sense of Security Pty Ltd Level 3, 66 King St Sydney NSW 2000 AUSTRALIA T: +61 (0)2 9290 4444 F: +61 (0)2 9290 4455 W: http://www.senseofsecurity.com.au E: info (at) senseofsecurity.com (dot) au [email concealed] Twitter: ITsecurityAU The latest version of this advisory can be found at: http://www.senseofsecurity.com.au/advisories/SOS-09-008 A video demonstrating this exploit can be found at: http://www.senseofsecurity.com.au/movies/SOS-09-008-safenet.mp4 Other Sense of Security advisories can be found at: http://www.senseofsecurity.com.au/research/it-security-advisories.php

References:

http://www.vupen.com/english/advisories/2009/3108
http://www.senseofsecurity.com.au/advisories/SOS-09-008
http://www.securitytracker.com/id?1023117
http://www.securityfocus.com/archive/1/archive/1/507593/100/0/threaded


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2021, cxsecurity.com

 

Back to Top