CVE-2009-4607: Overlandstorage Guardianos

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

The command line interface in Overland Storage Snap Server 410 with GuardianOS 5.1.041 runs the "less" utility with a higher-privileged uid than the CLI user and without sufficient restriction on shell escapes, which allows local users to gain privileges using the "!" character within less to access a privileged shell.

Affected products

• Overlandstorage Guardianos: version 5.1.041 only
• Overlandstorage Snap Server 410

Published 2010-01-13. Last modified 2026-06-16.