Security Advisory

CVE-2005-2849

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-09-08 04:00:00

Last updated 2024-08-07 22:53:28

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.

← Browse all CVEs View on cve.org ↗