CVE-2009-4606
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.80%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 0.80% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- south river technologies/webdrive
- Source
- cve@mitre.org
References
- http://osvdb.org/59080
- http://retrogod.altervista.org/9sg_south_river_priv.html
- http://secunia.com/advisories/37083Vendor Advisory
- http://www.securityfocus.com/archive/1/507323/100/0/threaded
- http://www.vupen.com/english/advisories/2009/2994Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53885
- http://osvdb.org/59080
- http://retrogod.altervista.org/9sg_south_river_priv.html
- http://secunia.com/advisories/37083Vendor Advisory
- http://www.securityfocus.com/archive/1/507323/100/0/threaded
- http://www.vupen.com/english/advisories/2009/2994Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53885
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.