| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 10.0 | $0-$5k | 0.13 |
A vulnerability, which was classified as very critical, was found in eEye Retina WiFi Scanner 1.0.8.68 (Wireless LAN Software). Affected is some unknown processing. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:
Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a .rws file with a long RWS010 entry.
The bug was discovered 05/16/2009. The weakness was published 07/10/2009 (Website). The advisory is shared for download at research.eeye.com. This vulnerability is traded as CVE-2009-3859 since 11/04/2009. It is possible to launch the attack remotely. The exploitation doesn’t require any form of authentication. Technical details are unknown but an exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 08/25/2021).
It is declared as proof-of-concept. The exploit is shared for download at exploit-db.com. The vulnerability was handled as a non-public zero-day exploit for at least 55 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 39809 (eEye Retina Wireless Scanner .rws Handling Buffer Overflow), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows.
A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (51625), Vulnerability Center (SBV-22913), Tenable (39809) and Exploit-DB (9114).
Type
Vendor
Name
VulDB Meta Base Score: 10.0
VulDB Meta Temp Score: 10.0
VulDB Base Score: 10.0
VulDB Temp Score: 10.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Class: Memory corruption
CWE: CWE-119
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
Download: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 39809
Nessus Name: eEye Retina Wireless Scanner .rws Handling Buffer Overflow
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Exploit-DB: 🔍
Threat Intelligence
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: no mitigation known
Status: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
PaloAlto IPS: 🔍
Fortigate IPS: 🔍
05/16/2009 🔍
07/10/2009 🔍
07/10/2009 🔍
07/10/2009 🔍
07/10/2009 🔍
07/16/2009 🔍
07/20/2009 🔍
11/04/2009 🔍
11/04/2009 🔍
03/18/2015 🔍
08/25/2021 🔍Advisory: research.eeye.com
Status: Not defined
CVE: CVE-2009-3859 (🔍)
X-Force: 51625
Vulnerability Center: 22913 – eEye Digital Security Retina WiFi Scanner Remote Arbitrary Code Execution Vulnerability, Medium
SecurityFocus: 35624
OSVDB: 55744 – eEye Retina Network Security Scanner RWS File Handling Overflow
Created: 03/18/2015 15:15
Updated: 08/25/2021 08:24
Changes: (1) source_nessus_risk
Complete: 🔍
Check our Alexa App!
