Detections
Analytics
DESlock+ < 3.2.7 Multiple Local Vulnerabilities
high Nessus Plugin ID 31130
Synopsis
The remote Windows host contains a program that is affected by multiple vulnerabilities.Description
DESlock+ is installed on the remote host. It is used for encrypting files, folders, and emails on Windows machines.The version of DESlock+ installed on the remote host reportedly contains several buffer overflows in its 'DLMFDISK.sys' and 'DLMFENC.sys' kernel drivers. Using specially crafted arguments to associated IOCTL handlers, a local user may be able to leverage these issues to crash the affected system or to execute arbitrary code with kernel privileges.
Solution
Upgrade to DESlock+ version 3.2.7 or later.See Also
Plugin Details
Severity: High
ID: 31130
File Name: deslock_327.nasl
Version: 1.13
Type: local
Agent: windows
Family: Windows
Published: 2/20/2008
Updated: 7/10/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-1138, CVE-2008-1139, CVE-2008-1140, CVE-2008-1141
BID: 27862