Overview
The Deterministic Network driver contains a privilege escalation vulnerability, which can allow a local attacker to execute code with kernel privileges.
Description
Deterministic Networks provides a product called Deterministic Network Enhancer (DNE), which extends the Microsoft Windows networking stack. DNE is packaged with multiple applications, including the Cisco VPN Client. The DNE driver, which is provided by dne2000.sys, is vulnerable to privilege escalation. By making a certain ioctl to the DNE device driver, it is possible to execute code with windows kernel privileges. |
Impact
A local attacker may be able to execute code with windows kernel privileges. |
Solution
Apply an update This issue is addressed in dne2000.sys version 3.21.12.17902. This driver is available from the DNE support page. |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
- http://www.digit-labs.org/files/exploits/dne2000-call.c
- http://www.deterministicnetworks.com/support/dnesupport.asp
- http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860
- http://secunia.com/advisories/30728/
- http://secunia.com/advisories/30753/
- http://secunia.com/advisories/30744/
- http://secunia.com/advisories/30747/
Acknowledgements
This vulnerability was reported by mu-b at Digit-Labs.
This document was written by Will Dormann.
Other Information
| CVE IDs: | None |
| Severity Metric: | 22.50 |
| Date Public: | 2008-06-17 |
| Date First Published: | 2008-06-18 |
| Date Last Updated: | 2008-06-27 16:47 UTC |
| Document Revision: | 10 |