PT-2009-6084 · Eeye · Eeye Retina Network Security Scanner+1

Gjoko Krstic + 1 · Published 2009-11-04 · Updated 2017-09-19 · CVE-2009-3859

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eEye Retina WiFi Scanner version 1.0.8.68 Retina Network Security Scanner version 5.10.14

Description The issue allows user-assisted remote attackers to cause a denial of service or execute arbitrary code via a .rws file with a long RWS010 entry. This can lead to an application crash or potentially more severe consequences.

Recommendations For eEye Retina WiFi Scanner version 1.0.8.68, avoid using .rws files with long RWS010 entries until a fix is available. For Retina Network Security Scanner version 5.10.14, restrict the use of the WiFi Scanner component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3859

Affected Products

Eeye Retina Network Security Scanner

Eeye Retina Wifi Scanner

References · 10

• 🔥 https://exploit-db.com/exploits/9114 · Exploit
• 🔥 http://exploit-db.com/exploits/9114 · Exploit
• http://secunia.com/advisories/35786 · Vendor Advisory
• http://securityfocus.com/bid/35624 · Vendor Advisory
• http://research.eeye.com/html/advisories/published/AD20090710.html · Vendor Advisory
• http://vupen.com/english/advisories/2009/1862 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3859 · Security Note
• http://osvdb.org/55744 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51625 · Note
• http://securitytracker.com/id?1022534 · Note