CVE-2009-4488

CRITICAL

Varnish 2.0.6 - Terminal Emulator Escape Sequence Injection via Log File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-4488. PoCs published by evilaliv3.

AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in Varnish by sending a maliciously crafted HTTP request containing an escape sequence that can execute arbitrary commands when processed by the logfile parser.

Description

Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendor disputes the significance of this report, stating that "This is not a security problem in Varnish or any other piece of software which writes a logfile. The real problem is the mistaken belief that you can cat(1) a random logfile to your terminal safely.

Exploits (1)

exploitdb WORKING POC VERIFIED
by evilaliv3 · textremotemultiple
https://www.exploit-db.com/exploits/33498

This exploit demonstrates a command injection vulnerability in Varnish by sending a maliciously crafted HTTP request containing an escape sequence that can execute arbitrary commands when processed by the logfile parser.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Varnish 2.0.6
No auth needed
Prerequisites: Network access to the target Varnish server · Varnish server with vulnerable version (2.0.6)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37713
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/508830/100/0/threaded

Scores

CVSS v3 9.8
EPSS 0.0192
EPSS Percentile 83.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-1284 CWE-20
Status published
Products (1)
varnish.projects.linpro/varnish 2.0.6
Published Jan 13, 2010
Tracked Since Feb 18, 2026