CVE-2009-4648

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-02-19 · updated 2026-06-16
Weakness: CWE-264

Description

Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in /usr/local/bin/admin.pl, or a hard link attack in (2) chmod or (3) a certain cp command.

Affected products

Accellion Secure File Transfer Appliance: 7_0_135, 7_0_178, 7_0_189, 7_0_259, 7_0_296

References

http://www.portcullis-security.com/338.php
http://www.securityfocus.com/bid/38176
https://exchange.xforce.ibmcloud.com/vulnerabilities/56248
http://www.portcullis-security.com/338.php
http://www.securityfocus.com/bid/38176
https://exchange.xforce.ibmcloud.com/vulnerabilities/56248

Get alerted when CVE-2009-4648 or the next vulnerability affects your stack