Exploitation Summary
EIP tracks 2 public exploits for CVE-2009-3861.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/fileformat/safenet_softremote_groupname.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in SafeNet SoftRemote Security Policy Editor <= 10.8.5 via an overly long GROUPNAME argument in a crafted security policy file. It achieves arbitrary code execution by overwriting the return address and injecting shellcode.
Description
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).
Exploits (2)
This is a Metasploit module exploiting a stack buffer overflow in SafeNet SoftRemote Security Policy Editor <= 10.8.5 via an overly long GROUPNAME argument in a crafted security policy file. It achieves arbitrary code execution by overwriting the return address and injecting shellcode.
This Metasploit module exploits a stack buffer overflow in SafeNet SoftRemote Security Policy Editor <= 10.8.5 via an overly long GROUPNAME argument in a security policy file. It achieves arbitrary code execution by overwriting the return address and injecting a payload.