CVE-2006-4000

Description

Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

• Barracuda Networks / barracuda_spam_firewall3.3.01.001 – 3.3.01.001
• Barracuda Networks / barracuda_spam_firewall3.3.03.053 – 3.3.03.053
• Barracuda Networks / barracuda_spam_firewall3.3.03.055 – 3.3.03.055

Exploits & proofs of concept

• exploit-dbBarracuda Spam Firewall 3.3.x - 'preview_email.cgi?file' Arbitrary File Accessby Greg Sinclair

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/3104
• VENDOR_ADVISORYhttp://secunia.com/advisories/21258
• MISChttp://www.securityfocus.com/bid/19276
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/28214
• MISChttp://www.securityfocus.com/archive/1/441861/100/0/threaded