Product Affected

All NetScreen-Remote versions prior to 9.0R5
High
7.0

Problem

This Security Bulletin addresses security flaws that have been fixed in NS-Remote 9.0r5:
- SafeNet SoftRemote Policy File Handling Remote Buffer Overflow Vulnerabilities (Juniper reference KB 36907 [juniper.net], SafeNet Bulletin 103009-1)
- SafeNet SoftRemote IKE Service Remote Stack Buffer Overflow Vulnerability (Juniper reference KB 35154 [juniper.net], SafeNet reference QA62358)

Solution

Upgrade to NS-Remote 9.0r5 or later is recommended.

No workarounds are available.

Severity Assessment

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition.

Information for how Juniper Networks uses CVSS can be found at KB 16446 "Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories." [juniper.net]

Related Information