fkie_cve-2013-4984
Vulnerability from fkie_nvd
Published
2013-09-10 11:28
Modified
2025-04-11 00:51
Severity ?
Summary
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| cve@mitre.org | http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities | Exploit, Technical Description, Vendor Advisory | |
| cve@mitre.org | http://www.sophos.com/en-us/support/knowledgebase/119773.aspx | Broken Link | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities | Exploit, Technical Description, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.sophos.com/en-us/support/knowledgebase/119773.aspx | Broken Link |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F9CB925A-27AD-4E9C-ABCE-9052460B8670",
"versionEndIncluding": "3.7.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E72AFE09-C005-4C58-89E4-95EC329E1456",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BBD8C41B-38D1-4443-BB4A-0BDBF1419B91",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F11B1311-687B-4CFD-A1DF-74F42C11CB03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "38EF1D57-81D6-4E1A-8597-2D505EEB113E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "936C0962-08DB-4C2F-8656-4948E2E9DAF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.4:*:*:*:*:*:*:*",
"matchCriteriaId": "84AE2D52-1C27-46BE-87CC-C32E74CBCE12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.5:*:*:*:*:*:*:*",
"matchCriteriaId": "D1160E50-C123-4091-9215-8793999FE1F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "18F26B00-B087-445F-9453-AA6F4EEBD9C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "67548C4C-C928-4E8A-BD7A-FDAFBBBA20E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "9ADEA7FD-8CBB-4979-891A-78E2AEB32149",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "16FD5529-F951-465D-9B5C-3AA7EA038F03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E4993820-1ED0-41A3-9A88-AB3AB0CB46AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F9B92DA3-55E3-4A60-AFA9-1CB9A3696892",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.4:*:*:*:*:*:*:*",
"matchCriteriaId": "9BA52349-778B-47EF-BEE7-831EA810C5C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "941BB190-EFA2-4476-BC6D-173272E92BBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D7B7E5D5-92D2-4F0B-91A0-CD9B20A4A1A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1884CAE7-F593-40A1-8ABA-F41A341231DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "38A6DDDE-470F-4F8D-AF46-333E1A5C52E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C425B54A-406A-4D0C-88E1-AEFA1772DD4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6DE9E620-5FFA-4756-BE2E-EBA71D2483D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.6:*:*:*:*:*:*:*",
"matchCriteriaId": "CC4DC81C-657A-4F2C-979D-7BFCAF8DC9DE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.7:*:*:*:*:*:*:*",
"matchCriteriaId": "41D0F267-E6CA-4064-912E-F5284DEA5B78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6728269D-1529-4048-9980-5B58FD3F47D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5282B986-2470-4B37-8051-0F0BB38F757D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E3E14CA5-9CAB-4859-8ED9-2654BB755A17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3BD9DC4D-1A56-478D-A82E-1136A053338D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "52F88C47-E8B0-4A43-9729-BA9B8D02D20D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "0A46534C-2EF3-4167-9577-B4F439D28270",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "FC925B44-DEB3-4509-8872-92302BAE87D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B9D00352-D5D7-4762-8941-33283A0BF54C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "91CA8948-2D0E-4DF7-B144-6D22E6C4733E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "12EE64AD-287A-4E7C-9E4D-125328EA17A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C01801C1-0851-4871-B46C-59E29930C46A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "936E37EF-D6F3-4E10-B55E-D098F564CA8A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "324DDE13-04D8-4FEB-A30E-7B97C88E65F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.3:*:*:*:*:*:*:*",
"matchCriteriaId": "F778DA33-8C98-4E05-9462-A311677F28F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "09C6014D-06AD-4B24-AD1C-B4DF85F7116C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.4:*:*:*:*:*:*:*",
"matchCriteriaId": "91C780C2-77B2-4B22-8E70-33BC5A265D3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.5:*:*:*:*:*:*:*",
"matchCriteriaId": "1C322B75-E0FF-43F6-B98A-4932C3963DBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.6:*:*:*:*:*:*:*",
"matchCriteriaId": "9DA0FCD5-BE10-4C06-99C9-383DD8320A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6A2741E9-9BEA-453F-A3C4-73185E8CE8F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.8:*:*:*:*:*:*:*",
"matchCriteriaId": "C414A114-7A2A-46EC-AA2D-313E5807F4C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EFCF1E94-D363-4D76-ABA7-14961FD7C284",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BB5DDB6C-87B0-46DD-BB6F-FE2CF182C15F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2BFB4121-D4DE-4408-98A3-75F0130B77D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "028DC0E3-D477-441A-8BBF-0D845EC121B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B6781185-BE24-43ED-9D30-D20E8BCC3065",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C75BA518-EDA7-472E-8076-4839E8F87E4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C09E0682-3627-4895-B9A2-058548C3E0F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.5:*:*:*:*:*:*:*",
"matchCriteriaId": "B0CD24FB-761D-4DC9-B56F-AD0F41475FAF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.6:*:*:*:*:*:*:*",
"matchCriteriaId": "35D35162-2FEF-45CB-99AF-B0606BEA72EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "BD27E74E-7698-4277-BFE8-E065914A5034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C5073E62-8F6B-49BD-9E8E-C4B47DD02A9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E80BE71D-8AA6-4304-A87B-1905D8468556",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "D2E0BD9F-0745-4F26-B198-28C83946BA0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0A40A529-E944-4FDB-A88C-9AEFBA067010",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.4.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EB5CF2F8-D3FB-4B2C-A031-B6B56A89A044",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "AC137078-0619-4167-8037-64CE1A2F4286",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D76F093E-1666-4DB3-8933-BE75CDB4E1A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "C9FEB8B8-6EB3-4814-B213-983B3B8F577E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "3B3BCA7A-BF09-46FA-8922-6BAA5F1F76AA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "6951182E-D6AD-416B-9C57-11C08045978B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DC68B7-4939-439F-9DFC-B47EF0993156",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "88EBB0D5-F4DA-407E-B1BA-4DE53DA2043D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "8BDF11D9-ADEF-4C4C-B09F-425C28FC5363",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "81A8F610-7B4F-4802-8BEB-BEE5AC45D4CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AFC38B5D-4FF5-4428-87D5-F7DA82EFFCC7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C1AF9BE6-C8E1-44C5-8176-FB64DFCEB3DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "2DBC7DE7-B772-45DE-934C-A131114544BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "91162663-4E48-4BF7-B6BF-1DBB67878D95",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8:*:*:*:*:*:*:*",
"matchCriteriaId": "DA35A488-2057-42B1-9570-6D122C1BBC1C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "23444EF3-308E-42A0-9578-EB2E0D2E5D38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "773225D2-B6F6-4983-8BBE-169E6D5984C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7E599CAD-00A6-46A3-8CF9-30562D42651B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sophos:web_appliance:3.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0BB74E3E-1378-4FD0-B4B4-DA56EB0C12EC",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument."
},
{
"lang": "es",
"value": "La funci\u00f3n close_connections en /opt/cma/bin/clear_keys.pl en Sophos Web Appliance anterior a v3.7.9.1 y v3.8 anterior a v3.8.1.1 permite a usuarios locales conseguir privilegios a trav\u00e9s de metacaracteres de consola en el segundo argumento."
}
],
"id": "CVE-2013-4984",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2013-09-10T11:28:41.073",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Technical Description",
"Vendor Advisory"
],
"url": "http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities"
},
{
"source": "cve@mitre.org",
"tags": [
"Broken Link"
],
"url": "http://www.sophos.com/en-us/support/knowledgebase/119773.aspx"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Technical Description",
"Vendor Advisory"
],
"url": "http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link"
],
"url": "http://www.sophos.com/en-us/support/knowledgebase/119773.aspx"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-78"
},
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…