Detections
Analytics
Barracuda Spam Firewall < 3.1.18 Multiple Vulnerabilities
high Nessus Plugin ID 19556
Language:
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
The remote host appears to be a Barracuda Spam Firewall network appliance, which protects mail servers from spam, viruses, and the like.Further, it appears that the installed appliance suffers from several vulnerabilities that allow for execution of arbitrary code and reading of arbitrary files, all subject to the permissions of the web server user id.
Solution
Upgrade to firmware 3.1.18 or later.See Also
Plugin Details
Severity: High
ID: 19556
File Name: barracuda_spam_firewall_3118.nasl
Version: 1.21
Type: remote
Family: CGI abuses
Published: 9/1/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/h:barracuda_networks:barracuda_spam_firewall
Required KB Items: www/barracuda_spamfw
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/1/2005
Vulnerability Publication Date: 9/1/2005
Exploitable With
Metasploit (Barracuda IMG.PL Remote Command Execution)
Reference Information
CVE: CVE-2005-2847, CVE-2005-2848