CVE-2009-4607 | BDVDB-2026-40001 Detail

Description#

The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-01-13Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.