CVE-2013-4984

CVE-2013-4984 describes a local privilege escalation vulnerability in Sophos Web Appliance versions prior to 3.7.9.1 and 3.8.1.1. An attacker can exploit a flaw in the close_connections function within the clear_keys.pl script by injecting shell metacharacters, leading to full compromise of the system. This vulnerability has a CVSS score of 7.2, indicating high severity with low attack complexity and requiring local access, but resulting in complete confidentiality, integrity, and availability impact. While not observed in active exploitation, a Metasploit module and ExploitDB entries exist, demonstrating exploitability. Despite available exploit code, there is minimal community discussion or media coverage surrounding this CVE.