CVE-2008-5121 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-5121
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-5121

Description: dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/43153 SREASON http://securityreason.com/securityalert/4600 SAID Secunia Advisory: SA30728 Secunia Advisory: SA30744 Secunia Advisory: SA30747 Secunia Advisory: SA30753 MISC http://www.digit-labs.org/files/exploits/dne2000-call.c http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860 MILW0RM http://www.milw0rm.com/exploits/5837 CONFIRM http://support.citrix.com/article/CTX117751 CERT-VN 858993 BID 29772

Return to the previous page.