CVE-2009-4607 The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shel...
HighCVSS 7.2
EPSS 0.62%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| overlandstorage snap server 410 | All versions | No fix listed |
| overlandstorage guardianos | = 5.1.041 | No fix listed |
References
- www.juniper.net
- 20091020 Overland Guardian OS CLI command line bug - let you get uid 0 shell mailing-list
- 36739 vdb-entry
- snapserver-less-priv-escalation(53881) vdb-entry