CVE-2009-4648

no score yetEPSS 0.8%

accellion secure file transfer appliance: no CVSS score yet. EPSS 0.8% chance of exploitation in the next 30 days.

Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows local administrators to gain privileges via (1) arbitrary arguments in the --file_move action in /usr/local/bin/admin.pl, or a hard link attack in (2) chmod or (3) a certain cp command.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2010-02-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

accellion:secure_file_transfer_appliance

References

http://www.portcullis-security.com/338.php
http://www.securityfocus.com/bid/38176
https://exchange.xforce.ibmcloud.com/vulnerabilities/56248
http://www.portcullis-security.com/338.php
http://www.securityfocus.com/bid/38176

Check your stack JSON