Design/Logic Flaw

DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash or potentially execute arbitrary code via a certain DLMFENCIOCTL request to \.\DLKPFSDDevice that overwrites a pointer, probably related to use of the ProbeForRead function when ProbeForWrite was...

Design/Logic Flaw

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4362

The Virtual Token driver vdlptokn.sys 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service system crash via a crafted IOCTL request to \Device\DLPTokenWalter0...

CVE-2008-4363

CVE-2008-4363 affects DESlock+ 3.2.7 with DLMFENC.sys 1.0.0.28. A vulnerability exists in a DLMFENC_IOCTL to the device path \./DLKPFSD_Device that likely overwrites a pointer due to a misused ProbeForRead/ProbeForWrite pairing. The consequence is local denial of service (system crash) and potent...

CVE-2008-4362

The CVE-2008-4362 entry concerns the DESlock+ product (Virtual Token driver vdlptokn.sys 1.0.2.43) and CVE details confirm that local users can trigger a denial-of-service (system crash) via a crafted IOCTL to the device path \Device\DLPTokenWalter0. Public records (NVD/NVD-derived and CVE lists)...

DESlock+本地缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 31273 CNCAN ID：CNCAN-2008092303 DESlock+是一款对文件和文件夹进行加密的设备。 DESlock+存在多个安全问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击或可提升特权。 -"DLMFENC.sys"驱动存在竞争条件和逻辑错误，可导致系统崩溃或以SYSTEM权限执行任意代码。 -"vdlptokn.sys"存在一个输入错误可导致系统崩溃。 Data Encryption Systems DESlock+ 3.2.7 Data Encryption Systems DESlock+ 3.2.6 目前没有解决方案提供：...

deslockvldptokn-dos.txt

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service

DESlock+ 3.2.7 - vdlptokn.sys Local Denial of Service //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | /...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

No description provided by source. / deslock-probe-race.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel race condition DoS POC by mu-b - Fri 22 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 race conditions between calls to ProbeForRead/ProbeForWrite and pointer use. "Note tha...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data...

DESlock+ 3.2.7 (vdlptokn.sys) Local Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= DESlock+ 3.2.7 vdlptokn.sys Local Denial of Service Exploit =============================================================...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

No description provided by source. / deslock-probe-read.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel DoS POC by mu-b - Sat 19 Jul 2008 - Tested on: DLMFENC.sys 1.0.0.28 call to ProbeForRead with a user-definable address that is eventually overwritten should have been...

DESlock+ <= 3.2.7 Local Kernel Overflow PoC

No description provided by source. / deslock-overflow.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel overflow POC by mu-b - Sat 23 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 http://www.cctmark.gov.uk/CCTMAwards/DataEncryptionSystemsLtd/tabid/103/Default.aspx - I wonder wh...

DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service

//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Data Encryption Systems Ltd. - http://www.deslock.com/ | // // | Data Encryption Systems DESlock+ - 3.2.7 | // /...

DESlock+ <= 3.2.7 Local Kernel Race Condition Denial of Service PoC

Exploit for unknown platform in category dos / poc =================================================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; voi...

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service (PoC)

DESlock+ 3.2.7 - Local Kernel Race Condition Denial of Service PoC / deslock-probe-race.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xDEADBEEF define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ...

DESlock+ < 3.2.7 - 'probe read' Local Kernel Denial of Service (PoC)

/ deslock-probe-read.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq req DWORD i, pid; PCHAR pt...

DESlock+ < 3.2.7 - Local Kernel Overflow (PoC)

/ deslock-overflow.c Copyright c 2008 by DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void argARGSIZE0x20; ; static void xormaskreq struct ioctlreq r...

DESlock+ <= 3.2.7 (probe read) Local Kernel Denial of Service PoC

Exploit for unknown platform in category dos / poc ================================================================= DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum; void...

DESlock+ <= 3.2.7 Local Kernel Overflow PoC

Exploit for unknown platform in category dos / poc =========================================== DESlock+ DESlock+ include include define DLMFENCIOCTL 0x0FA4204C define DLMFENCFLAG 0xC001D00D define DLMFENCBUZSZ 0x1000 define ARGSIZEa a-sizeof int2/sizeof void struct ioctlreq int flag; int reqnum;...