CVEvulnerability

CVE-2009-3861

6.9 MEDIUM Published 2009-11-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).

Affected configurations

• safenet-inc softremote (<= 10.8.8) • safenet-inc softremote 1.7.1 • safenet-inc softremote 1.7.2 • safenet-inc softremote 1.7.7 • safenet-inc softremote 1.8.1 • safenet-inc softremote 1.9.0 • safenet-inc softremote 10.3.5 • safenet-inc softremote 10.7.7 • safenet-inc softremote 10.8.0 • safenet-inc softremote 10.8.1 • safenet-inc softremote 10.8.2 • safenet-inc softremote 10.8.3 • safenet-inc softremote 10.8.4 • safenet-inc softremote 10.8.5 • safenet-inc softremote 10.8.6 • safenet-inc softremote 10.8.7

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References