PT-2010-1346 · Varnish+1 · Varnish+1

Alessandro Tanasi + 5 · Published 2010-01-13 · Updated 2025-01-21 · CVE-2009-4488

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Varnish version 2.0.6

Description The issue arises from Varnish writing data to a log file without sanitizing non-printable characters. This could potentially allow remote attackers to modify a window's title or possibly execute arbitrary commands or overwrite files via an HTTP request containing an escape sequence for a terminal emulator. The vendor disputes the significance of this report, stating that the real problem lies in the mistaken belief that one can safely use the cat(1) command on a random log file to their terminal.

Recommendations For Varnish version 2.0.6, consider avoiding the use of cat(1) on log files to prevent potential exploitation, as the vendor suggests the issue lies in this practice rather than the software itself. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-1284

CWE-20

Related Identifiers

CVE-2009-4488

Affected Products

Debian

Varnish

References · 16

• 🔥 http://securityfocus.com/bid/37713 · Exploit
• 🔥 http://ush.it/team/ush/hack_httpd_escape/adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/33498 · Exploit
• https://security-tracker.debian.org/tracker/source-package/varnish · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2009-4488 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4488 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-4488 · Vendor Advisory
• https://ubuntu.com/security/CVE-2009-4488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4488 · Security Note
• https://cve.org/CVERecord?id=CVE-2009-4488 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4488 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2009-4488 · Vendor Advisory
• https://packages.debian.org/src:varnish · Note
• https://t.me/cvenotify/89583 · Telegram Post
• http://securityfocus.com/archive/1/508830/100/0/threaded · Note