CVE:CVE-2011-3337
CNNVD:CNNVD-201111-208
eEye Retina中存在本地权限提升漏洞。由于Audit ID 2499 ("Gauntlet Firewall For UNIX Buffer Overflow")在"/usr/local"文件夹中执行特定文件，攻击者可通过在"/usr/local"文件夹中放置恶意文件，并且利用Retina的权限执行任意代码。
solution:Upgrade eeye digital_security_audits to a higher version than 2406,2423,and avoid the version 2406,2423; Upgrade eeye retina_network_security_scanner to a higher version than *