CVE-2005-2849

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via…

published September 8, 2005

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01387 · 71.9th percentile
Published
2005-09-08T04:00Z
EPSS history
Timeline
  • 08 SEP 04:00Z
    Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via…
    cvelistv5