NVD

Id
51724  
Name
CVE-2009-4607  
Description
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2010-01-13  
Modified Date
2010-01-13  
Seq
2009-4607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262060 51724 CVE-2009-4607 http://www.juniper.net/security/auto/vulnerabilities/vuln36739.html  View
262061 51724 CVE-2009-4607 20091020 Overland Guardian OS CLI command line bug - let you get uid 0 shell  View
262062 51724 CVE-2009-4607 36739  View
262063 51724 CVE-2009-4607 snapserver-less-priv-escalation(53881)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38559 JVNDB-2010-004344 GuardianOS 上で稼動する Overland Storage Snap Server のコマンドラインインターフェースにおける権限を取得される脆弱性 GuardianOS 上で稼動する Overland Storage Snap Server のコマンドラインインターフェースは、シェルエスケープ上で十分な制限なしで CLI ユーザより高い権限の uid で "less" ユーティリティを実行するため、権限を取得される脆弱性が存在します。 CVE-2009-4607 42038 CVE-2009-4607 51724 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004344.html 2010-01-13 2012-09-25 View