Vulnerability Details CVE-2009-4644
Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.8%
CVSS Severity
CVSS v2 Score 9.0
References
Products affected by CVE-2009-4644
-
cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_135
-
cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_178
-
cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_189
-
cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_259
-
cpe:2.3:h:accellion:secure_file_transfer_appliance:7_0_296