CVE-2013-4984

{"id": "CVE-2013-4984", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-10T11:28:41.073", "references": [{"url": "http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities", "tags": ["Exploit", "Technical Description", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.sophos.com/en-us/support/knowledgebase/119773.aspx", "tags": ["Broken Link"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}, {"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument."}, {"lang": "es", "value": "La funci\u00f3n close_connections en /opt/cma/bin/clear_keys.pl en Sophos Web Appliance anterior a v3.7.9.1 y v3.8 anterior a v3.8.1.1 permite a usuarios locales conseguir privilegios a trav\u00e9s de metacaracteres de consola en el segundo argumento."}], "lastModified": "2016-11-08T14:00:38.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9CB925A-27AD-4E9C-ABCE-9052460B8670", "versionEndIncluding": "3.7.9"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E72AFE09-C005-4C58-89E4-95EC329E1456"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBD8C41B-38D1-4443-BB4A-0BDBF1419B91"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F11B1311-687B-4CFD-A1DF-74F42C11CB03"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38EF1D57-81D6-4E1A-8597-2D505EEB113E"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "936C0962-08DB-4C2F-8656-4948E2E9DAF1"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84AE2D52-1C27-46BE-87CC-C32E74CBCE12"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1160E50-C123-4091-9215-8793999FE1F9"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.0.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18F26B00-B087-445F-9453-AA6F4EEBD9C2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67548C4C-C928-4E8A-BD7A-FDAFBBBA20E2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9ADEA7FD-8CBB-4979-891A-78E2AEB32149"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16FD5529-F951-465D-9B5C-3AA7EA038F03"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4993820-1ED0-41A3-9A88-AB3AB0CB46AE"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9B92DA3-55E3-4A60-AFA9-1CB9A3696892"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BA52349-778B-47EF-BEE7-831EA810C5C6"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "941BB190-EFA2-4476-BC6D-173272E92BBF"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7B7E5D5-92D2-4F0B-91A0-CD9B20A4A1A2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1884CAE7-F593-40A1-8ABA-F41A341231DF"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38A6DDDE-470F-4F8D-AF46-333E1A5C52E9"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C425B54A-406A-4D0C-88E1-AEFA1772DD4C"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DE9E620-5FFA-4756-BE2E-EBA71D2483D3"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC4DC81C-657A-4F2C-979D-7BFCAF8DC9DE"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41D0F267-E6CA-4064-912E-F5284DEA5B78"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6728269D-1529-4048-9980-5B58FD3F47D2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5282B986-2470-4B37-8051-0F0BB38F757D"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3E14CA5-9CAB-4859-8ED9-2654BB755A17"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BD9DC4D-1A56-478D-A82E-1136A053338D"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52F88C47-E8B0-4A43-9729-BA9B8D02D20D"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A46534C-2EF3-4167-9577-B4F439D28270"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC925B44-DEB3-4509-8872-92302BAE87D1"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9D00352-D5D7-4762-8941-33283A0BF54C"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91CA8948-2D0E-4DF7-B144-6D22E6C4733E"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12EE64AD-287A-4E7C-9E4D-125328EA17A2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C01801C1-0851-4871-B46C-59E29930C46A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "936E37EF-D6F3-4E10-B55E-D098F564CA8A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "324DDE13-04D8-4FEB-A30E-7B97C88E65F8"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F778DA33-8C98-4E05-9462-A311677F28F8"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09C6014D-06AD-4B24-AD1C-B4DF85F7116C"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91C780C2-77B2-4B22-8E70-33BC5A265D3A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C322B75-E0FF-43F6-B98A-4932C3963DBD"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DA0FCD5-BE10-4C06-99C9-383DD8320A40"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A2741E9-9BEA-453F-A3C4-73185E8CE8F2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C414A114-7A2A-46EC-AA2D-313E5807F4C2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFCF1E94-D363-4D76-ABA7-14961FD7C284"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB5DDB6C-87B0-46DD-BB6F-FE2CF182C15F"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BFB4121-D4DE-4408-98A3-75F0130B77D2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "028DC0E3-D477-441A-8BBF-0D845EC121B5"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6781185-BE24-43ED-9D30-D20E8BCC3065"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C75BA518-EDA7-472E-8076-4839E8F87E4A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C09E0682-3627-4895-B9A2-058548C3E0F7"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0CD24FB-761D-4DC9-B56F-AD0F41475FAF"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.5.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35D35162-2FEF-45CB-99AF-B0606BEA72EA"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD27E74E-7698-4277-BFE8-E065914A5034"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5073E62-8F6B-49BD-9E8E-C4B47DD02A9A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E80BE71D-8AA6-4304-A87B-1905D8468556"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2E0BD9F-0745-4F26-B198-28C83946BA0A"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A40A529-E944-4FDB-A88C-9AEFBA067010"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB5CF2F8-D3FB-4B2C-A031-B6B56A89A044"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.2.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC137078-0619-4167-8037-64CE1A2F4286"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D76F093E-1666-4DB3-8933-BE75CDB4E1A9"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9FEB8B8-6EB3-4814-B213-983B3B8F577E"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B3BCA7A-BF09-46FA-8922-6BAA5F1F76AA"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.6.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6951182E-D6AD-416B-9C57-11C08045978B"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7DC68B7-4939-439F-9DFC-B47EF0993156"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88EBB0D5-F4DA-407E-B1BA-4DE53DA2043D"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BDF11D9-ADEF-4C4C-B09F-425C28FC5363"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81A8F610-7B4F-4802-8BEB-BEE5AC45D4CB"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFC38B5D-4FF5-4428-87D5-F7DA82EFFCC7"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1AF9BE6-C8E1-44C5-8176-FB64DFCEB3DB"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DBC7DE7-B772-45DE-934C-A131114544BD"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91162663-4E48-4BF7-B6BF-1DBB67878D95"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA35A488-2057-42B1-9570-6D122C1BBC1C"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23444EF3-308E-42A0-9578-EB2E0D2E5D38"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.7.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "773225D2-B6F6-4983-8BBE-169E6D5984C2"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E599CAD-00A6-46A3-8CF9-30562D42651B"}, {"criteria": "cpe:2.3:a:sophos:web_appliance:3.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BB74E3E-1378-4FD0-B4B4-DA56EB0C12EC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}