The Barracuda Spam Firewalls from versions 3.3.01.001 through 3.3.02.053 are vulnerable to arbitrary file disclosure via the preview_email.cgi script.
8363029dcc673fedc8a62cebf430f37662f1cabb8e3673ab097dc0ee0fc14f0d
Lack of input sanitization in the Linux based Barracuda spam firewall web interface allows execution of commands by unauthenticated users. Combined with privilege elevation techniques, execution of commands as the root user is possible allowing a full system compromise.
b6fbee81267f573a9e3a6ebdd95df93304d4a2182a2a5d2f92be17db98ef260d