VDB

GCVE-110-CERTCC-2011-448051

GCVE-110-CERTCC-2011-448051
Advisory Published
Vulnetix · Advisory published November 8, 2011
eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular (audit ID 2499) uses find(1) and execute (-exec) when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an executable file in the portion of the file system searched with the find command may be able to exploit this vulnerability to execute arbitrary code with the same privileges provided to Retina to perform a vulnerability scan.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact19population12exploitation0widely_known0score_current0.12825ease_of_exploitation1
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1

Aliases

CVE-2011-3337

Transitive aliases

GHSA-86g8-f44w-2x46GSD-2011-3337

References

eEye Retina audit script could execute untrusted programs as root
url
eEye Retina audit script could execute untrusted programs as root
url
eEye Retina audit script could execute untrusted programs as root
url
eEye Retina audit script could execute untrusted programs as root
advisory

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›