CVE-2009-4606

HOCH 7.2CVE-2009-4606 · Published 13/01/2010 · updated 16/06/2026

Kurz gesagt

CVE-2009-4606 ist eine Schwachstelle (HOCH (CVSS 7.2)) in webdrive (south river technologies).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.80%, höher als bei 56.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
webdrive south_river_technologies	`= 9.02`	No fix yet

Description

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

References

osvdb.org/59080
retrogod.altervista.org/9sg_south_river_priv.html
secunia.com/advisories/37083 · Vendor Advisory
securityfocus.com/archive/1/507323/100/0/threaded
vupen.com/english/advisories/2009/2994 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/53885

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free