{"api_version":"1","generated_at":"2026-07-23T12:46:58+00:00","cve":"CVE-2013-4984","urls":{"html":"https://cve.report/CVE-2013-4984","api":"https://cve.report/api/cve/CVE-2013-4984.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-4984","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-4984"},"summary":{"title":"CVE-2013-4984","description":"The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-09-10 11:28:41","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-78","CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.2","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities","name":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Vendor Advisory"],"title":"Sophos Web Protection Appliance Multiple Vulnerabilities | CORE Security","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx","name":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Vulnerabilities reported in Sophos Web Appliance","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4984","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4984","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.0.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.3.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.4.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.5.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.6.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.7.8.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.8.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"3.8.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"4984","vulnerable":"1","versionEndIncluding":"3.7.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sophos","cpe5":"web_appliance","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:59:41.248Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-09-10T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-4984","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities","refsource":"MISC","url":"http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities"},{"name":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx","refsource":"CONFIRM","url":"http://www.sophos.com/en-us/support/knowledgebase/119773.aspx"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-4984","datePublished":"2013-09-10T10:00:00.000Z","dateReserved":"2013-07-29T00:00:00.000Z","dateUpdated":"2024-09-16T19:04:18.463Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-09-10 11:28:41","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-78","CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7.9","matchCriteriaId":"F9CB925A-27AD-4E9C-ABCE-9052460B8670"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E72AFE09-C005-4C58-89E4-95EC329E1456"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BBD8C41B-38D1-4443-BB4A-0BDBF1419B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F11B1311-687B-4CFD-A1DF-74F42C11CB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"38EF1D57-81D6-4E1A-8597-2D505EEB113E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"936C0962-08DB-4C2F-8656-4948E2E9DAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84AE2D52-1C27-46BE-87CC-C32E74CBCE12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D1160E50-C123-4091-9215-8793999FE1F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"18F26B00-B087-445F-9453-AA6F4EEBD9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"67548C4C-C928-4E8A-BD7A-FDAFBBBA20E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9ADEA7FD-8CBB-4979-891A-78E2AEB32149"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16FD5529-F951-465D-9B5C-3AA7EA038F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E4993820-1ED0-41A3-9A88-AB3AB0CB46AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F9B92DA3-55E3-4A60-AFA9-1CB9A3696892"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9BA52349-778B-47EF-BEE7-831EA810C5C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"941BB190-EFA2-4476-BC6D-173272E92BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D7B7E5D5-92D2-4F0B-91A0-CD9B20A4A1A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1884CAE7-F593-40A1-8ABA-F41A341231DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"38A6DDDE-470F-4F8D-AF46-333E1A5C52E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C425B54A-406A-4D0C-88E1-AEFA1772DD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6DE9E620-5FFA-4756-BE2E-EBA71D2483D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"CC4DC81C-657A-4F2C-979D-7BFCAF8DC9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"41D0F267-E6CA-4064-912E-F5284DEA5B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"6728269D-1529-4048-9980-5B58FD3F47D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5282B986-2470-4B37-8051-0F0BB38F757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"E3E14CA5-9CAB-4859-8ED9-2654BB755A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3BD9DC4D-1A56-478D-A82E-1136A053338D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"52F88C47-E8B0-4A43-9729-BA9B8D02D20D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.4:*:*:*:*:*:*:*","matchCriteriaId":"0A46534C-2EF3-4167-9577-B4F439D28270"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FC925B44-DEB3-4509-8872-92302BAE87D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B9D00352-D5D7-4762-8941-33283A0BF54C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"91CA8948-2D0E-4DF7-B144-6D22E6C4733E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"12EE64AD-287A-4E7C-9E4D-125328EA17A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C01801C1-0851-4871-B46C-59E29930C46A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"936E37EF-D6F3-4E10-B55E-D098F564CA8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"324DDE13-04D8-4FEB-A30E-7B97C88E65F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F778DA33-8C98-4E05-9462-A311677F28F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"09C6014D-06AD-4B24-AD1C-B4DF85F7116C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"91C780C2-77B2-4B22-8E70-33BC5A265D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"1C322B75-E0FF-43F6-B98A-4932C3963DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"9DA0FCD5-BE10-4C06-99C9-383DD8320A40"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"6A2741E9-9BEA-453F-A3C4-73185E8CE8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"C414A114-7A2A-46EC-AA2D-313E5807F4C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFCF1E94-D363-4D76-ABA7-14961FD7C284"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BB5DDB6C-87B0-46DD-BB6F-FE2CF182C15F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2BFB4121-D4DE-4408-98A3-75F0130B77D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"028DC0E3-D477-441A-8BBF-0D845EC121B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B6781185-BE24-43ED-9D30-D20E8BCC3065"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C75BA518-EDA7-472E-8076-4839E8F87E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C09E0682-3627-4895-B9A2-058548C3E0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B0CD24FB-761D-4DC9-B56F-AD0F41475FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"35D35162-2FEF-45CB-99AF-B0606BEA72EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BD27E74E-7698-4277-BFE8-E065914A5034"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C5073E62-8F6B-49BD-9E8E-C4B47DD02A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"E80BE71D-8AA6-4304-A87B-1905D8468556"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D2E0BD9F-0745-4F26-B198-28C83946BA0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0A40A529-E944-4FDB-A88C-9AEFBA067010"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EB5CF2F8-D3FB-4B2C-A031-B6B56A89A044"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AC137078-0619-4167-8037-64CE1A2F4286"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D76F093E-1666-4DB3-8933-BE75CDB4E1A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C9FEB8B8-6EB3-4814-B213-983B3B8F577E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"3B3BCA7A-BF09-46FA-8922-6BAA5F1F76AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6951182E-D6AD-416B-9C57-11C08045978B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"A7DC68B7-4939-439F-9DFC-B47EF0993156"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"88EBB0D5-F4DA-407E-B1BA-4DE53DA2043D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8BDF11D9-ADEF-4C4C-B09F-425C28FC5363"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"81A8F610-7B4F-4802-8BEB-BEE5AC45D4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.4:*:*:*:*:*:*:*","matchCriteriaId":"AFC38B5D-4FF5-4428-87D5-F7DA82EFFCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"C1AF9BE6-C8E1-44C5-8176-FB64DFCEB3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.6:*:*:*:*:*:*:*","matchCriteriaId":"2DBC7DE7-B772-45DE-934C-A131114544BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.7:*:*:*:*:*:*:*","matchCriteriaId":"91162663-4E48-4BF7-B6BF-1DBB67878D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.8:*:*:*:*:*:*:*","matchCriteriaId":"DA35A488-2057-42B1-9570-6D122C1BBC1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"23444EF3-308E-42A0-9578-EB2E0D2E5D38"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"773225D2-B6F6-4983-8BBE-169E6D5984C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"7E599CAD-00A6-46A3-8CF9-30562D42651B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:web_appliance:3.8.1:*:*:*:*:*:*:*","matchCriteriaId":"0BB74E3E-1378-4FD0-B4B4-DA56EB0C12EC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"4984","Ordinal":"1","Title":"CVE-2013-4984","CVE":"CVE-2013-4984","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"4984","Ordinal":"1","NoteData":"The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.","Type":"Description","Title":"CVE-2013-4984"},{"CveYear":"2013","CveId":"4984","Ordinal":"2","NoteData":"2013-09-10","Type":"Other","Title":"Published"}]}}}