CVE-2009-3233

CVE-2009-3233 describes a local command injection vulnerability in changetrack version 4.3. An attacker can execute arbitrary commands by embedding CRLF sequences and shell metacharacters within filenames in directories monitored by changetrack. This vulnerability carries a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking widespread community discussion or media coverage, an exploit for local privilege escalation is publicly available on ExploitDB.