CVE-2011-3337

2022-10-0316:15:07

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-3337

eeye

audit

security

scanner

hp-ux

irix

solaris

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.

Affected configurations

NVD

Node

eeyedigital_security_auditsMatch2406

eeyedigital_security_auditsMatch2423

eeyeretina_network_security_scanner

AND

hphp-ux

sgiirix

sunsunos

CPENameOperatorVersion
eeye:digital_security_auditseeye digital security auditseq2406
eeye:digital_security_auditseeye digital security auditseq2423
eeye:retina_network_security_scannereeye retina network security scannereq*

CPE	Name	Operator	Version
eeye:digital_security_audits	eeye digital security audits	eq	2406
eeye:digital_security_audits	eeye digital security audits	eq	2423
eeye:retina_network_security_scanner	eeye retina network security scanner	eq	*