CVE-2011-3337

Name: CVE-2011-3337
Creator: NVD / NIST
Published: 2012-01-04T03:55:09.193+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.31%

Last modified Jun 16, 2026

CVE-2011-3337 is a vulnerability of currently unknown severity. eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.

Description

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/.

Metrics

EPSS Probability

0.31%

22.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Eeye	Digital Security Audits	2406
Eeye	Digital Security Audits	2423
Eeye	Retina Network Security Scanner	All versions

References

http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108Vendor Advisory
http://www.kb.cert.org/vuls/id/448051US Government Resource
http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108Vendor Advisory
http://www.kb.cert.org/vuls/id/448051US Government Resource

Timeline

Published: Jan 4, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-3337?

How severe is CVE-2011-3337?

Severity scoring for CVE-2011-3337 is pending analysis. The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.

How do I fix CVE-2011-3337?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-3337?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST