CVE-2009-4493 describes a vulnerability in Orion Application Server 2.0.7 where unsanitized non-printable characters written to log files can be exploited. This allows remote attackers to manipulate terminal window titles and potentially execute arbitrary commands or overwrite files through specially crafted HTTP requests. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it is a medium severity vulnerability that can be exploited remotely with low complexity and no authentication. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-33503) exists, indicating public exploit code availability, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.7CPE matchmatch criteria | cpe:2.3:a:orion:orion_application_server:2.0.7:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.