CVE-2009-3861

SafeNet SoftRemote <10.8.9 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16643
metasploit WORKING POC GOOD
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/safenet_softremote_groupname.rb

Scores

EPSS 0.0657
EPSS Percentile 91.2%

Details

CWE
CWE-119
Status published
Products (16)
safenet-inc/softremote 1.7.1
safenet-inc/softremote 1.7.2
safenet-inc/softremote 1.7.7
safenet-inc/softremote 1.8.1
safenet-inc/softremote 1.9.0
safenet-inc/softremote 10.3.5
safenet-inc/softremote 10.7.7
safenet-inc/softremote 10.8.0
safenet-inc/softremote 10.8.1
safenet-inc/softremote 10.8.2
... and 6 more
Published Nov 04, 2009
Tracked Since Feb 18, 2026