DriveLock < Agent Version Detection

Medium Nessus Network Monitor Plugin ID 4224


The remote host is vulnerable to a buffer overflow.


DriveLock is a software security product that can control physical access to computer resources. The remote host is running a DriveLock agent.
This version of DriveLock is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would only need to be able to send a very long string to the HTTP server listening on port 6061. Successful exploitation would result in the attacker executing arbitrary code on the remote machine.


Upgrade to version or higher.

See Also

Plugin Details

Severity: Medium

ID: 4224

File Name: 4224.prm

Family: Generic

Published: 2007/10/03

Modified: 2016/02/05

Risk Information

Risk Factor: Medium


Base Score: 5.8

Temporal Score: 4.9

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:U/RC:ND


Base Score: 6.2

Temporal Score: 5.6


Temporal Vector: CVSS3#E:U/RL:U/RC:X

Reference Information

CVE: CVE-2007-5209

BID: 25902