What is CVE-2013-4984?

CVE-2013-4984 is a vulnerability in Sophos Web_appliance, classified under OS Command Injection. Published 2013-09-10.

Is CVE-2013-4984 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

RCE in Sophos Web_appliance

CVE-2013-4984

The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.078 (92.1th percentile) — read the EPSS interpretation.

Affected products

Sophos Web_appliance — versions 3.0.0, 3.0.1, 3.0.1.1
N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cve@mitre.org (Technical Description, Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2013-4984?: CVE-2013-4984 is a vulnerability in Sophos Web_appliance, classified under OS Command Injection. Published 2013-09-10.
Is CVE-2013-4984 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.