PT-2007-4440 · Safenet · Safenet High Assurance Remote

Published 2007-06-11 · Updated 2017-07-29 · CVE-2007-3157

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SafeNET High Assurance Remote version 1.4.0 Build 12

Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and system hang, via an invalid packet with certain bytes in an option header. This could be related to the IPv6 support for IPSec.

Recommendations: For SafeNET High Assurance Remote version 1.4.0 Build 12, consider restricting access to the IPSecDrv.sys driver until a patch is available. As a temporary workaround, avoid using the IPv6 support for IPSec to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3157

Affected Products

Safenet High Assurance Remote

References · 9

• 🔥 http://securityfocus.com/bid/24385 · Exploit
• 🔥 http://digit-labs.org/files/exploits/safenet-dos.c · Exploit
• 🔥 https://exploit-db.com/exploits/4047 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063859.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3157 · Security Note
• http://securityreason.com/securityalert/2803 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34775 · Note
• http://osvdb.org/37137 · Note
• http://secunia.com/advisories/25574 · Note