PT-2008-1003 · Blue Coat+4 · Bluecoat Winproxy+4
Mu-B
·
Publicado
2008-11-17
·
Atualizado
2017-09-29
·
CVE-2008-5121
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Citrix Deterministic Network Enhancer versions 2.21.7.233 through 3.21.7.17464
Description
The issue allows local users to gain privileges via a crafted
DNE IOCTL DeviceIoControl request to the ".DNE" device interface. This affects products that use Citrix Deterministic Network Enhancer, including Cisco VPN Client, Blue Coat WinProxy, SafeNet SoftRemote, and HighAssurance Remote.Recommendations
For Citrix Deterministic Network Enhancer versions 2.21.7.233 through 3.21.7.17464, consider restricting access to the
DNE IOCTL DeviceIoControl request to minimize the risk of exploitation. As a temporary workaround, disabling the DeviceIoControl request to the ".DNE" device interface may help until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bluecoat Winproxy
Cisco Vpn Client
Citrix Deterministic Network Enhancer
Highassurance Remote
Safenet Softremote