Lucene search
MitreCVE-2009-4606HistoryJan 13, 2010 - 11:30 a.m.
CVE-2009-4606
2010-01-1311:30:00
CWE-264
mitre
web.nvd.nist.gov
21
cve-2009-4606
south river technologies
webdrive service
security descriptor
local users
arbitrary commands
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0
Percentile
0.4%
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
Affected configurations
Node
south_river_technologieswebdriveMatch9.02build_2232
| Vendor | Product | Version | CPE |
|---|---|---|---|
| south_river_technologies | webdrive | 9.02 | cpe:2.3:a:south_river_technologies:webdrive:9.02:build_2232:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2009-4606
2010-01-13 11:30:00
packetstorm
packetstorm
openvas
openvas
South River Technologies WebDrive Local Privilege Escalation Vulnerability
2010-01-28 00:00:00
South River Technologies WebDrive Local Privilege Escalation Vulnerability
2010-01-28 00:00:00
prion
prion
Command injection
2010-01-13 11:30:00
exploitdb
exploitdb
cvelist
cvelist
CVE-2009-4606
2010-01-13 11:00:00
seebug
seebug
WebDrive缺少安全描述符本地权限提升漏洞
2010-01-28 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.4
Confidence
High
EPSS
0
Percentile
0.4%
Related for CVE-2009-4606