what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

barracudeArbitrary.txt

Posted Aug 17, 2006

Authored by Greg Sinclair

The Barracuda Spam Firewalls from versions 3.3.01.001 through 3.3.02.053 are vulnerable to arbitrary file disclosure via the preview_email.cgi script.

tags | exploit, arbitrary, cgi

SHA-256 | 8363029dcc673fedc8a62cebf430f37662f1cabb8e3673ab097dc0ee0fc14f0d

Download | Favorite | View

Related Files

barracudaExec.txt

Posted Aug 18, 2006

Authored by Matthew Hall

Lack of input sanitization in the Linux based Barracuda spam firewall web interface allows execution of commands by unauthenticated users. Combined with privilege elevation techniques, execution of commands as the root user is possible allowing a full system compromise.

tags | exploit, web, root

systems | linux

SHA-256 | b6fbee81267f573a9e3a6ebdd95df93304d4a2182a2a5d2f92be17db98ef260d

Download | Favorite | View