Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-4494

AOLserver 4.5.1 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.034
EPSS Ranking 87.1%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2009-4494
  • Aol » Aolserver » Version: 4.5.1
    cpe:2.3:a:aol:aolserver:4.5.1


Contact Us

Shodan ® - All rights reserved