PT-2009-6387 · Ca · Etrust Pestpatrol

Published 2009-12-08 · Updated 2021-04-09 · CVE-2009-4225

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA eTrust PestPatrol version 5.6.7.9

Description The issue is a stack-based buffer overflow in the PestPatrol ActiveX control, which allows remote attackers to execute arbitrary code. This is achieved by passing a long argument to the Initialize method.

Recommendations For CA eTrust PestPatrol version 5.6.7.9, consider disabling the Initialize method in the PestPatrol ActiveX control until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4225

Affected Products

Etrust Pestpatrol

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/etrust_pestscan.rb · Exploit
• 🔥 http://metasploit.com/redmine/projects/framework/repository/revisions/7167/entry/modules/exploits/windows/fileformat/etrust_pestscan.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16630 · Exploit
• 🔥 http://securityfocus.com/bid/37133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4225 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54458 · Note
• http://fortiguard.com/encyclopedia/vulnerability/ca.etrust.pestpatrol.ppctl.dll.activex.access.html · Note