VULNERABILITY INTELLIGENCE
CVE-2009-4607
CVSS score7.2 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2010-01-13
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.