CVE-2005-2849

3 documents3 sources
Severity
6.4MEDIUM
EPSS
0.5%
top 33.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Barracuda Networks Barracuda Spam Firewall
Timeline
PublishedSep 8
Latest updateMay 1

Description

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 10.0 | Impact: 4.9

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: securiweb.net ↗Patch: www.securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-67pj-hwx8-33wx: Argument injection vulnerability in Barracuda Spam Firewall running firmware 3↗2022-05-01
▶
CVEList
CVE-2005-2849: Argument injection vulnerability in Barracuda Spam Firewall running firmware 3↗2005-09-08
▶
CVE-2005-2849 (MEDIUM CVSS 6.4) | Argument injection vulnerability in | cvebase.io