Overland Storage Snap Server 410 'less' Command Local Privilege Escalation Vulnerability

Bugtraq ID:	36739
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 20 2009 12:00AM
Updated:	Oct 20 2009 06:48PM
Credit:	[email protected]
Vulnerable:	Overland Storage Snap Server 410 0 Overland Storage GuardianOS 5.1.41
Not Vulnerable:

Overland Storage Snap Server 410 'less' Command Local Privilege Escalation Vulnerability

Overland Storage Snap Server is prone to a local privilege-escalation vulnerability.

Successful exploits may allow attackers to execute arbitrary code with elevated privileges.

This issue affects Snap Server 410 running GuardianOS 5.1.041; other versions or devices may also be affected.

Overland Storage Snap Server 410 'less' Command Local Privilege Escalation Vulnerability

Attackers can exploit this issue using readily available tools.

Overland Storage Snap Server 410 'less' Command Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Overland Storage Snap Server 410 'less' Command Local Privilege Escalation Vulnerability

References:

• GuardianOS Homepage (Overland Storage)
  
• Snap Server 410 Homepage (Overland Storage)
  
• Overland Guardian OS CLI command line bug - let you get uid 0 shell ([email protected])