CVE-2008-5121 json
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat…
published 2008-11-18 17 y ago modified 2026-06-16 4 mo ago also EUVD-2008-5100
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.1%
- EPSS 1.1% chance of exploitation in 30 days, percentile 66%
- public exploits
- 1
- Exploit-DB
Summary
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remote, allows local users to gain privileges via a crafted DNE_IOCTL DeviceIoControl request to the \\.\DNE device interface.
Timeline
- First public exploit (EDB-5837)
- Published
Exploit prediction
1.12% chance of exploitation in the next 30 days, higher than 66% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-5837 Deterministic Network Enhancer - 'dne2000.sys' Kernel Ring0 SYSTEM local, 2008-06-17
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
exploit-db.com
/exploits/5837
exploit
-
secunia.com
/advisories/30728
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/30744
third-party-advisory, vendor-advisory
-
secunia.com
/advisories/30747
third-party-advisory, vendor-advisory
-
kb.cert.org
/vuls/id/858993
third-party-advisory, us-government-resource
-
vupen.com
/english/advisories/2008/1867
vdb-entry
-
vupen.com
/english/advisories/2008/1868
vdb-entry
- digit-labs.org /files/exploits/dne2000-call.c
- support.citrix.com /article/CTX117751
-
securityfocus.com
/bid/29772
vdb-entry
-
securityreason.com
/securityalert/4600
third-party-advisory
-
vupen.com
/english/advisories/2008/1865
vdb-entry
-
secunia.com
/advisories/30753
third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/43153
vdb-entry
-
vupen.com
/english/advisories/2008/1866
vdb-entry
- tools.cisco.com /Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm25860
Sources
- CVE List CVE-2008-5121
- NVD CVE-2008-5121
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.