CVE-2009-4606 - CVE House
Back to Database
Status published High CVE-2009-4606

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive...

Vulnerability Description

South River Technologies WebDrive 9.02 build 2232 installs the WebDrive Service without a security descriptor, which allows local users to (1) stop the service via the stop command, (2) execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or (3) restart the service via the start command.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-4606

Credits & Attribution

No credits recorded in the NVD database.

References

More from south river technologies

View All →
CVE-2008-5281
Heap-based buffer overflow in Titan FTP Server 6.05 build 550...
Critical 10
CVE-2008-0702
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and...
Critical 9.3
CVE-2004-1641
Heap-based buffer overflow in Titan FTP 3.21 and earlier allows...
Medium 5
CVE-2004-0437
Titan FTP Server version 3.01 build 163, and possibly other...
Medium 5

Affected Vendor

south river technologies

View all reports →

Affected Software

webdrive
Vulnerable Versions:
9.02

Timeline

Official Publish: January 13th, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.