• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Barracuda Spam Firewall IMG.PL Remote Command Execution Vulnerability

Barracuda Spam Firewall is prone to a remote arbitrary command execution vulnerability.

This issue arises when user-specified commands are supplied to the Web interface of the device.

An attacker can supply arbitrary commands and have them executed in the context of the server. This issue may facilitate unauthorized remote access.

Barracuda Spam Firewall firmware 3.1.17 and prior versions are affected by this issue.