Netscreen-Remote VPN Client IKE Packet Excessive Payloads Vulnerability
BID:5668
Info
Netscreen-Remote VPN Client IKE Packet Excessive Payloads Vulnerability
| Bugtraq ID: | 5668 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 07 2002 12:00AM |
| Updated: | Sep 07 2002 12:00AM |
| Credit: | Vulnerability announced in a Netscreen Security Advisory. |
| Vulnerable: |
NetScreen Netscreen-Remote VPN Client 8.0 NetScreen Netscreen-Remote Security Client 8.0 |
| Not Vulnerable: |
NetScreen Netscreen-Remote VPN Client 8.1 NetScreen Netscreen-Remote Security Client 8.1 |
Discussion
Netscreen-Remote VPN Client IKE Packet Excessive Payloads Vulnerability
The Netscreen-Remote VPN Client is prone to a remotely exploitable buffer overflow condition. It is possible to trigger this condition by sending malformed IKE packets to the client. The overflow is known to occur when the client attempts to process an IKE packet with several valid payloads.
It may be possible to exploit this condition to execute arbitrary code with the privileges of the client. This issue is known to result in a denial of service condition in a vulnerable client.
This vulnerability affects versions of the client on all platforms.
The Netscreen-Remote VPN Client is prone to a remotely exploitable buffer overflow condition. It is possible to trigger this condition by sending malformed IKE packets to the client. The overflow is known to occur when the client attempts to process an IKE packet with several valid payloads.
It may be possible to exploit this condition to execute arbitrary code with the privileges of the client. This issue is known to result in a denial of service condition in a vulnerable client.
This vulnerability affects versions of the client on all platforms.
Exploit / POC
Netscreen-Remote VPN Client IKE Packet Excessive Payloads Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Netscreen-Remote VPN Client IKE Packet Excessive Payloads Vulnerability
Solution:
Netscreen has stated that version 8.1 of the Netscreen-Remote VPN Client and Netscreen-Remote Security Client will be available on September 30, 2002, and will be downloadable via http://www.netscreen.com/support/updates.html (login required).
Solution:
Netscreen has stated that version 8.1 of the Netscreen-Remote VPN Client and Netscreen-Remote Security Client will be available on September 30, 2002, and will be downloadable via http://www.netscreen.com/support/updates.html (login required).