high7.2Public exploit code
CVE-2013-4984
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privilege…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sophos Web Protection Appliance - clear_keys.pl Privilege Escalation (Metasploit)2013-09-17 · local · linux · Verified
- Sophos Web Protection Appliance - Multiple Vulnerabilities2013-09-09 · webapps · linux · Verified
Impact
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Web Appliance | through 3.7.9 Versions 3.0.0, 3.0.1, 3.0.1.1, 3.0.2, 3.0.3 |