IT Security Research
IT Security Advisory
The innovations for the future need
secure foundations today.
With information technology now embedded in all business activities, security is an enterprise concern.

SafeNet SoftRemote Local Buffer Overflow

Sense of Security - Security Advisory - SOS-09-008 security advisory

Release Date.                  30-Oct-2009
Last Update.                   30-Oct-2009
Vendor Notification Date.      20-Jul-2009
Product.                       SafeNet SoftRemote
Platform.                      Microsoft Windows
Affected versions.             10.8.5 (Build 2), 10.3.5 (Build 6) 
                               verified and possibly others. 
                               Other vendors which have OEM'd the 
                               client. 
Severity Rating.               High
Impact.                        System access
Attack Vector.                 Local
Solution Status.               Fixed in 10.8.9 (unverified)
CVE reference.                 CVE-2009-3861

Details.
SafeNet SoftRemote is an IPsec VPN client that sets up a secure 
channel for data transport. The application is a popular VPN client
which has been OEM'd by many other companies. As a result this 
vulnerability affects a number of products and vendors. 

SafeNet SoftRemote is vulnerable to a local stack based buffer 
overflow which can lead to the compromise of a vulnerable system. 

The vulnerability is caused due to a boundary error when processing
certain sections of spd (policy) files. Passing an overly long
string to either "TREENAME" or "GROUPNAME" will trigger the
overflow. Successful exploitation results in the execution of
arbitrary code. 
 
Solution.
Fixed in 10.8.9 (unverified).

Discovered by.
Brett Gervasoni from SOS Labs.

A video demonstrating the exploitation of this vulnerability has
been created.
Reset Font Size Increase Font Size Contact us via email form Share/Save/Bookmark

Telephone 1300 922 923.

For an engagement enquiry.
For an information request.