CVE-2008-4451 - Vulnerability Details - OpenCVE

The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \Device\esiasdrv that overwrites a pointer.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Eset Software	System Analyzer Tool

Configuration 1 [-]

cpe:2.3:a:eset_software:system_analyzer_tool:1.1.1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://securityreason.com/securityalert/4353
http://www.ntinternals.org/
http://www.securityfocus.com/bid/31521
https://exchange.xforce.ibmcloud.com/vulnerabilities/45619
https://www.exploit-db.com/exploits/6647

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-10-06T23:00:00

Updated: 2024-08-07T10:17:09.699Z

Reserved: 2008-10-06T00:00:00

Link: CVE-2008-4451

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2008-10-06T23:25:50.520

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-4451

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-10-01T00:00:00", "descriptions": [{"lang": "en", "value": "The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \\Device\\esiasdrv that overwrites a pointer."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "sysinspector-esiadrv-privilege-escalation(45619)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45619"}, {"tags": ["x_refsource_MISC"], "url": "http://www.ntinternals.org/"}, {"name": "4353", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/4353"}, {"name": "31521", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/31521"}, {"name": "6647", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/6647"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-4451", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \\Device\\esiasdrv that overwrites a pointer."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "sysinspector-esiadrv-privilege-escalation(45619)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45619"}, {"name": "http://www.ntinternals.org/", "refsource": "MISC", "url": "http://www.ntinternals.org/"}, {"name": "4353", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/4353"}, {"name": "31521", "refsource": "BID", "url": "http://www.securityfocus.com/bid/31521"}, {"name": "6647", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/6647"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T10:17:09.699Z"}, "title": "CVE Program Container", "references": [{"name": "sysinspector-esiadrv-privilege-escalation(45619)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45619"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.ntinternals.org/"}, {"name": "4353", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/4353"}, {"name": "31521", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/31521"}, {"name": "6647", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/6647"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-4451", "datePublished": "2008-10-06T23:00:00", "dateReserved": "2008-10-06T00:00:00", "dateUpdated": "2024-08-07T10:17:09.699Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eset_software:system_analyzer_tool:1.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "84E03FB0-977F-4488-9A1C-F0F03BCC558C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary code via a certain METHOD_NEITHER IOCTL request to \\Device\\esiasdrv that overwrites a pointer."}, {"lang": "es", "value": "El controlador de SysInspector AntiStealth (archivo esiasdrv.sys) versi\u00f3n 3.0.65535.0 en System Analyzer Tool de ESET versi\u00f3n 1.1.1.0, permite a los usuarios locales ejecutar c\u00f3digo arbitrario por medio de una determinada petici\u00f3n de METHOD_NEITHER IOCTL en \\Device\\esiasdrv que sobrescribe un puntero."}], "id": "CVE-2008-4451", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-10-06T23:25:50.520", "references": [{"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/4353"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.ntinternals.org/"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/31521"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45619"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/6647"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/4353"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.ntinternals.org/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/31521"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45619"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/6647"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}