SafeNet SoftRemote VPN Client Discloses Key to Local Users
Categorie: Vulnerability Posted: 2005-02-11 by ReCall Views: 368 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in the SafeNet SoftRemote VPN client. A local user may be able to obtain the VPN key.
The SafeNet SoftRemote client 'IreIKE.exe' process stores the VPN password (i.e., preshare key) in process memory. A local user with access to memory can obtain the key.
The client also stores the key in encoded form in the Windows Registry and in policy files ('.spd' files). A local user with access to the registry or the policy files can decode the key.
