medium4.0Public exploit code
CVE-2006-4000
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Barracuda Spam Firewall 3.3.x - 'preview_email.cgi?file' Arbitrary File Access2006-08-01 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Barracuda Networks | Barracuda Spam Firewall | Versions 3.3.01.001, 3.3.03.053, 3.3.03.055 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21258
- http://www.securityfocus.com/archive/1/441861/100/0/threaded
- http://www.securityfocus.com/bid/19276
- http://www.vupen.com/english/advisories/2006/3104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28214
- http://secunia.com/advisories/21258
- http://www.securityfocus.com/archive/1/441861/100/0/threaded
- http://www.securityfocus.com/bid/19276
- http://www.vupen.com/english/advisories/2006/3104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28214