Barracuda Web Interface Arbitrary Command Injection Vulnerability
BID:74033
Info
Barracuda Web Interface Arbitrary Command Injection Vulnerability
| Bugtraq ID: | 74033 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2015 12:00AM |
| Updated: | Apr 09 2015 12:00AM |
| Credit: | Russell Sanford |
| Vulnerable: |
Barracuda Barracuda 5.0.0.012 |
| Not Vulnerable: | |
Discussion
Barracuda Web Interface Arbitrary Command Injection Vulnerability
Barracuda is prone to a remote command-injection vulnerability.
An attacker may leverage this issue to execute arbitrary commands in the context of the affected device.
Barracuda running firmware versions 5.0.0.012 and prior are vulnerable.
Barracuda is prone to a remote command-injection vulnerability.
An attacker may leverage this issue to execute arbitrary commands in the context of the affected device.
Barracuda running firmware versions 5.0.0.012 and prior are vulnerable.
Exploit / POC
Barracuda Web Interface Arbitrary Command Injection Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
Barracuda Web Interface Arbitrary Command Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Barracuda Web Interface Arbitrary Command Injection Vulnerability
References:
References:
- Barracuda Products Page (Barracuda)