SafeNET High Assurance Remote and SoftRemote IPSecDrv.SYS Remote Denial Of Service Vulnerability

Bugtraq ID:	24385
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-3157
Remote:	Yes
Local:	No
Published:	Jun 08 2007 12:00AM
Updated:	Apr 16 2015 06:12PM
Credit:	mu-b is credited with the discovery of this issue.
Vulnerable:	SafeNet SafeNet HighAssurance SoftRemote 1.4 SafeNet SafeNet HighAssurance Remote 1.4
Not Vulnerable:

SafeNET High Assurance Remote and SoftRemote IPSecDrv.SYS Remote Denial Of Service Vulnerability

SafeNET High Assurance Remote and SoftRemote are prone to a remote denial-of-service vulnerability because the software fails to properly handle certain network packets.

A successful attack allows a remote attacker to crash affected computers, denying further service to legitimate users.

SafeNET High Assurance Remote 1.4.0 and SoftRemote 1.4.0 are reported vulnerable to this issue.

SafeNET High Assurance Remote and SoftRemote IPSecDrv.SYS Remote Denial Of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/24385.c

SafeNET High Assurance Remote and SoftRemote IPSecDrv.SYS Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SafeNET High Assurance Remote and SoftRemote IPSecDrv.SYS Remote Denial Of Service Vulnerability

References:

• SafeNet Homepage (SafeNet)