PT-2009-6387 · Ca · Etrust Pestpatrol

Publicado 2009-12-08 · Atualizado 2021-04-09 · CVE-2009-4225

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA eTrust PestPatrol version 5.6.7.9

Description The issue is a stack-based buffer overflow in the PestPatrol ActiveX control, which allows remote attackers to execute arbitrary code. This is achieved by passing a long argument to the Initialize method.

Recommendations For CA eTrust PestPatrol version 5.6.7.9, consider disabling the Initialize method in the PestPatrol ActiveX control until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-4225

Produtos afetados

Etrust Pestpatrol

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/etrust_pestscan.rb · Exploit
• 🔥 http://metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16630 · Exploit
• 🔥 http://securityfocus.com/bid/37133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4225 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54458 · Nota
• http://fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html · Nota