CVE-2013-4984

The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second argument.

• CWE-78
• CWE-264

• http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilitiesExploit, Technical Description, Vendor Advisory
• http://www.sophos.com/en-us/support/knowledgebase/119773.aspxBroken Link
• http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilitiesExploit, Technical Description, Vendor Advisory
• http://www.sophos.com/en-us/support/knowledgebase/119773.aspxBroken Link

Published

Sep 10, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4978Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and e…
• CVE-2013-4979Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 …
• CVE-2013-4980Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 …
• CVE-2013-4981Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 …
• CVE-2013-4982AVTECH AVN801 DVR has a security bypass via the administrati…9.8
• CVE-2013-4983The get_referers function in /opt/ws/bin/sblistpack in Sopho…
• CVE-2013-4985Multiple Vivotek IP Cameras remote authentication bypass tha…7.5
• CVE-2013-4986Stack-based buffer overflow in PDFAX0722_IconCool.dll 7.22.1…
• CVE-2013-4987PineApp Mail-SeCure before 3.70 allows remote authenticated …
• CVE-2013-4988Stack-based buffer overflow in IcoFX 2.5 and earlier allows …
• CVE-2013-4995Cross-site scripting (XSS) vulnerability in phpMyAdmin 3.5.x…
• CVE-2013-4996Multiple cross-site scripting (XSS) vulnerabilities in phpMy…