Sense of Security is one of Australia’s most trusted providers of cyber resilience, information security and risk management services.

Latest announcements
© Copyright Sense of Security

Security Advisory – SOS-09-008 – SafeNet SoftRemote (treename, groupname) Local Buffer Overflow Vulnerability

Release Date: 30-Oct-2009

Last Update:

Vendor Notification Date: 20-Jul-2009

Product: SafeNet SoftRemote

Platform: Microsoft Windows

Affected versions: 10.8.5 (Build 2), 10.3.5 (Build 6) verified and possibly others
Other vendors which have OEM’d the client.

Severity Rating: High

Impact: System Access

Attack Vector: Local

Solution Status: Fixed in 10.8.9 (unverified)

CVE reference: Not currently assigned


SafeNet SoftRemote is an IPsec VPN client that sets up a secure channel for data transport. The application is a popular VPN client which has been OEM’d by many other companies. As a result this vulnerability affects a number of products and vendors.

SafeNet SoftRemote is vulnerable to a local stack based buffer overflow which can lead to the compromise of a vulnerable system.

The vulnerability is caused due to a boundary error when processing certain sections of spd (policy) files. Passing an overly long string to either “TREENAME” or “GROUPNAME” will trigger the overflow.

Successful exploitation results in the execution of arbitrary code.

Please refer to the PDF version of this advisory  for proof of concept code examples.


Fixed in 10.8.9 (unverified).

Discovered By

Brett Gervasoni from Sense of Security Labs.

Our expert consultants are here to help you. For all your Cyber Security needs please contact us today.

No Comments

Sorry, the comment form is closed at this time.