medium6.9Public exploit code
CVE-2009-3861
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execu…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SafeNet SoftRemote - GROUPNAME Buffer Overflow (Metasploit)2010-11-11 · local · windows · Verified
Impact
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Safenet-Inc | Softremote | through 10.8.8 Versions 1.7.1, 1.7.2, 1.7.7, 1.8.1, 1.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/507593/100/0/threaded
- http://www.securitytracker.com/id?1023117
- http://www.senseofsecurity.com.au/advisories/SOS-09-008
- http://www.vupen.com/english/advisories/2009/3108
- http://www.securityfocus.com/archive/1/507593/100/0/threaded
- http://www.securitytracker.com/id?1023117
- http://www.senseofsecurity.com.au/advisories/SOS-09-008
- http://www.vupen.com/english/advisories/2009/3108