Security Advisory

CVE-2009-4607

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-01-13 11:00:00

Last updated 2024-08-07 07:08:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.

← Browse all CVEs View on cve.org ↗