vulnwire
7.2high

CVE-2008-51211 exploit

dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 66%
Public exploits
1
Exploit-DB

dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.

Exploit prediction (EPSS)

1.12% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.

Exploits and detections

  • EDB-5837 Deterministic Network Enhancer - 'dne2000.sys' Kernel Ring0 SYSTEM · local · 2008-06-17

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • kb.cert.org /vuls/id/858993 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • vupen.com /english/advisories/2008/1867 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exploit-db.com /exploits/5837 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vupen.com /english/advisories/2008/1868 · vdb-entry, x_refsource_VUPEN, x_transferred
  • digit-labs.org /files/exploits/dne2000-call.c · x_refsource_MISC, x_transferred
  • secunia.com /advisories/30728 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.citrix.com /article/CTX117751 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/29772 · vdb-entry, x_refsource_BID, x_transferred
  • securityreason.com /securityalert/4600 · third-party-advisory, x_refsource_SREASON, x_transferred
  • vupen.com /english/advisories/2008/1865 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/30753 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/43153 · vdb-entry, x_refsource_XF, x_transferred
  • vupen.com /english/advisories/2008/1866 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/30744 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • tools.cisco.com /Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860 · x_refsource_MISC, x_transferred
  • secunia.com /advisories/30747 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.