CVSS: 8.8EPSS: 68%CPEs: 20EXPL: 4CVE-2009-2936 – Varnish Cache CLI Interface - Remote Code Execution
https://notcve.org/view.php?id=CVE-2009-2936
05 Apr 2010 — The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code; (2) change the ownership of the master process via param.set, stop, and start directives; (3) read the initial line of an arbitrary file via... • https://packetstorm.news/files/id/180959 • CWE-287: Improper Authentication •
CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 3CVE-2009-4488 – Varnish 2.0.6 - 'Terminal Escape Sequence in Logs' Command Injection
https://notcve.org/view.php?id=CVE-2009-4488
13 Jan 2010 — Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE: the vendor disputes the significance of this report, stating that "This is not a security problem in Varnish or any other piece of software which writes a logfile. The real problem is the mistaken belief that you can cat(1) ... • https://www.exploit-db.com/exploits/33498 • CWE-20: Improper Input Validation CWE-1284: Improper Validation of Specified Quantity in Input •