PT-2008-1003 · Blue Coat+4 · Bluecoat Winproxy+4
Mu-B
·
Published
2008-11-17
·
Updated
2017-09-29
·
CVE-2008-5121
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Citrix Deterministic Network Enhancer versions 2.21.7.233 through 3.21.7.17464
Description
The issue allows local users to gain privileges via a crafted
DNE IOCTL DeviceIoControl request to the ".DNE" device interface. This affects products that use Citrix Deterministic Network Enhancer, including Cisco VPN Client, Blue Coat WinProxy, SafeNet SoftRemote, and HighAssurance Remote.Recommendations
For Citrix Deterministic Network Enhancer versions 2.21.7.233 through 3.21.7.17464, consider restricting access to the
DNE IOCTL DeviceIoControl request to minimize the risk of exploitation. As a temporary workaround, disabling the DeviceIoControl request to the ".DNE" device interface may help until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Bluecoat Winproxy
Cisco Vpn Client
Citrix Deterministic Network Enhancer
Highassurance Remote
Safenet Softremote