CVE-2007-3157 IPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to cause a denial of service (infinite loop and system hang) via an invalid packet with....
MediumCVSS 5.0
EPSS 8.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
IPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to cause a denial of service (infinite loop and system hang) via an invalid packet with certain bytes in an option header, possibly related to the IPv6 support for IPSec.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| safenet highassurance remote | = 1.4.0_build_12 | No fix listed |
| safenet softremote vpn client | = 1.4 | No fix listed |
References
- 20070608 SafeNET High Assurance Remote/SoftRemote (IPSecDrv.sys) remote DoS exploit mailing-list
- 37137 vdb-entry
- 25574 third-party-advisory
- 2803 third-party-advisory
- www.digit-labs.org exploit
- 24385 exploit vdb-entry
- safenet-ipsecdrv-dos(34775) vdb-entry