DriveLock < 5.0.0.314 Agent Version Detection

Medium Nessus Network Monitor Plugin ID 4224

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

DriveLock is a software security product that can control physical access to computer resources. The remote host is running a DriveLock agent.
This version of DriveLock is vulnerable to a remote buffer overflow. An attacker exploiting this flaw would only need to be able to send a very long string to the HTTP server listening on port 6061. Successful exploitation would result in the attacker executing arbitrary code on the remote machine.

Solution

Upgrade to version 5.0.0.314 or higher.

See Also

http://www.drivelock.de

Plugin Details

Severity: Medium

ID: 4224

File Name: 4224.prm

Family: Generic

Published: 2007/10/03

Modified: 2016/02/05

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5.8

Temporal Score: 4.9

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:U/RC:ND

CVSSv3

Base Score: 6.2

Temporal Score: 5.6

Vector: CVSS3#AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:U/RC:X

Reference Information

CVE: CVE-2007-5209

BID: 25902