Lucene search

K
cve[email protected]CVE-2009-4644
HistoryFeb 19, 2010 - 5:30 p.m.

CVE-2009-4644

2010-02-1917:30:00
CWE-78
web.nvd.nist.gov
14
accellion
secure file transfer
appliance
bypass
restricted shell
ping command
cve-2009-4644
nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.

Affected configurations

NVD
Node
accellionsecure_file_transfer_applianceMatch7_0_135
OR
accellionsecure_file_transfer_applianceMatch7_0_178
OR
accellionsecure_file_transfer_applianceMatch7_0_189
OR
accellionsecure_file_transfer_applianceMatch7_0_259
OR
accellionsecure_file_transfer_applianceMatch7_0_296

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

Related for CVE-2009-4644