Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

Bugtraq ID:	14712
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2005 12:00AM
Updated:	Sep 01 2005 12:00AM
Credit:	Discovery is credited to Francois Harvey <[email protected]>.
Vulnerable:	Barracuda Networks Barracuda Spam Firewall 3.1.17 firmware
Not Vulnerable:	Barracuda Networks Barracuda Spam Firewall 3.1.18 firmware

Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

Barracuda Spam Firewall is prone to a remote arbitrary command execution vulnerability.

This issue arises when user-specified commands are supplied to the Web interface of the device.

An attacker can supply arbitrary commands and have them executed in the context of the server. This issue may facilitate unauthorized remote access.

Barracuda Spam Firewall firmware 3.1.17 and prior versions are affected by this issue.

Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

An exploit is not required.

The following proof of concept is available:

f=../bin/ls|

The following Metasploit exploit is available:

• /data/vulnerabilities/exploits/barracuda_img_exec.pl

Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

Solution:
The vendor has released firmware version 3.1.18 to address this and other issues. Please contact the vendor to obtain the upgrade.

Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

References:

• Barracuda Spam Firewall Product Page (Barracuda Networks)
  
• [SecuriWeb.2005.1] - Barracuda SPAM firewall advisory (Francois Harvey )