PT-2007-4440 · Safenet · Safenet High Assurance Remote

Publicado 2007-06-11 · Atualizado 2017-07-29 · CVE-2007-3157

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SafeNET High Assurance Remote version 1.4.0 Build 12

Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and system hang, via an invalid packet with certain bytes in an option header. This could be related to the IPv6 support for IPSec.

Recommendations: For SafeNET High Assurance Remote version 1.4.0 Build 12, consider restricting access to the IPSecDrv.sys driver until a patch is available. As a temporary workaround, avoid using the IPv6 support for IPSec to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-3157

Produtos afetados

Safenet High Assurance Remote

Referências · 9

• 🔥 http://securityfocus.com/bid/24385 · Exploit
• 🔥 http://digit-labs.org/files/exploits/safenet-dos.c · Exploit
• 🔥 https://exploit-db.com/exploits/4047 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063859.html · Exploit
• http://securityreason.com/securityalert/2803 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34775 · Nota
• http://osvdb.org/37137 · Nota
• http://secunia.com/advisories/25574 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3157 · Nota de Segurança