icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

DriveLock < 5.0.0.314 Agent Version Detection

Medium

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

DriveLock is a software security product that can control physical access to computer resources. The remote host is running a DriveLock agent. This version of DriveLock is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would only need to be able to send a very long string to the HTTP server listening on port 6061. Successful exploitation would result in the attacker executing arbitrary code on the remote machine.

Solution

Upgrade to version 5.0.0.314 or higher.