CVE-2013-4984
N/A
Published: September 10, 2013 at 10:00 AM UTC
Updated: June 16, 2026 at 11:58 PM UTC
1 product affected across 1 vendorWeb Appliance
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 8%
Description
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.7.93.0.03.0.13.0.1.13.0.23.0.33.0.43.0.53.0.5.13.1.03.1.0.13.1.13.1.23.1.33.1.43.2.13.2.23.2.2.13.2.33.2.43.2.53.2.63.2.73.3.03.3.13.3.23.3.33.3.3.13.3.43.3.53.3.5.13.3.63.3.6.13.4.03.4.13.4.23.4.33.4.3.13.4.43.4.53.4.63.4.73.4.83.5.03.5.13.5.1.13.5.1.23.5.23.5.33.5.43.5.53.5.63.6.13.6.1.13.6.23.6.2.13.6.2.33.6.2.4.03.6.2.4.13.6.33.6.43.6.4.13.6.4.23.7.03.7.13.7.23.7.33.7.43.7.53.7.63.7.73.7.83.7.8.13.7.8.23.8.03.8.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
x_refsource_MISCExploitTechnical DescriptionVendor Advisory
Source: [email protected]
http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilitiesx_refsource_CONFIRMBroken Link
Source: [email protected]
http://www.sophos.com/en-us/support/knowledgebase/119773.aspxQuick Info
StatusMODIFIED
CWE
CWE-78CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card