medium5.0Public exploit code
CVE-2005-2848
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit)2005-09-27 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Barracuda Networks | Barracuda Spam Firewall | Versions 3.1.16, 3.1.17 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112560044813390&w=2
- http://secunia.com/advisories/16683/
- http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1
- http://www.securityfocus.com/bid/14710
- http://www.securitytracker.com/alerts/2005/Sep/1014837.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22120
- http://marc.info/?l=bugtraq&m=112560044813390&w=2
- http://secunia.com/advisories/16683/
- http://securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1
- http://www.securityfocus.com/bid/14710
- http://www.securitytracker.com/alerts/2005/Sep/1014837.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22120