CVE-2009-4488

CVE-2009-4488 describes a critical vulnerability in Varnish 2.0.6 where unsanitized non-printable characters written to log files could allow remote attackers to manipulate terminal emulators, potentially leading to command execution or file overwrites. With a CVSS score of 9.8, this network-exploitable flaw requires no user interaction and could result in complete compromise of confidentiality, integrity, and availability. While the vendor disputes its significance, an exploit is available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.