CVE Feed

    Dashboard / CVE / CVE-2008-5121

    CVE-2008-5121

    dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.

    Published:Nov 18, 2008
    Last Modified:Apr 23, 2026
    EPS:Nov 18, 2008
    EPSS Score:0.0035
    CVSS Score:7.2

    Affected Products

    Vendor
    Bluecoat
    Product
    Winproxy
    Vendor
    Cisco
    Product
    Vpn Client
    Vendor
    Citrix
    Product
    Deterministic Network Enhancer
    Vendor
    Safenet
    Product
    Highassurance Remote
    Vendor
    Safenet
    Product
    Softremote Vpn Client

    Exploits

    https://www.exploit-db.com/exploits/5837

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://secunia.com/advisories/30728
    http://secunia.com/advisories/30744
    http://secunia.com/advisories/30747
    http://secunia.com/advisories/30753
    http://securityreason.com/securityalert/4600
    http://support.citrix.com/article/CTX117751
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860
    http://www.digit-labs.org/files/exploits/dne2000-call.c
    http://www.kb.cert.org/vuls/id/858993
    http://www.securityfocus.com/bid/29772
    http://www.vupen.com/english/advisories/2008/1865
    http://www.vupen.com/english/advisories/2008/1866
    http://www.vupen.com/english/advisories/2008/1867
    http://www.vupen.com/english/advisories/2008/1868
    https://exchange.xforce.ibmcloud.com/vulnerabilities/43153
    https://www.exploit-db.com/exploits/5837
    http://secunia.com/advisories/30728
    http://secunia.com/advisories/30744
    http://secunia.com/advisories/30747
    http://secunia.com/advisories/30753
    http://securityreason.com/securityalert/4600
    http://support.citrix.com/article/CTX117751
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860
    http://www.digit-labs.org/files/exploits/dne2000-call.c
    http://www.kb.cert.org/vuls/id/858993
    http://www.securityfocus.com/bid/29772
    http://www.vupen.com/english/advisories/2008/1865
    http://www.vupen.com/english/advisories/2008/1866
    http://www.vupen.com/english/advisories/2008/1867
    http://www.vupen.com/english/advisories/2008/1868
    https://exchange.xforce.ibmcloud.com/vulnerabilities/43153
    https://www.exploit-db.com/exploits/5837

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High