CVE-2009-4454

VideoCache 1.9.2 - Local Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-4454. PoCs published by Dominick LaTrappe.

AI-analyzed exploit summary This exploit leverages a time-of-check to time-of-use (TOCTOU) race condition in VideoCache's vccleaner utility to append arbitrary data to privileged files. By manipulating file timestamps and symlinks, an attacker with Squid proxy privileges can inject commands into root-owned files like /etc/rc.local.

Description

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.

Exploits (1)

exploitdb WORKING POC
by Dominick LaTrappe · textlocallinux
https://www.exploit-db.com/exploits/10487

This exploit leverages a time-of-check to time-of-use (TOCTOU) race condition in VideoCache's vccleaner utility to append arbitrary data to privileged files. By manipulating file timestamps and symlinks, an attacker with Squid proxy privileges can inject commands into root-owned files like /etc/rc.local.

Classification
Working Poc 100%
Attack Type
Lpe
Complexity
Moderate
Reliability
Reliable
Target: VideoCache 1.9.2
Auth required
Prerequisites: Access to Squid proxy user privileges · Write access to /var/spool/videocache and /var/log/videocache directories · Administrator execution of vccleaner utility
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/508507/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/54916
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/37733

Scores

EPSS 0.0019
EPSS Percentile 40.6%

Details

CWE
CWE-59
Status published
Products (1)
saini/videocache 1.9.2
Published Dec 29, 2009
Tracked Since Feb 18, 2026