Lucene search
HistoryAug 05, 2006 - 1:04 a.m.
CVE-2006-4000
cve-2006-4000
directory traversal
barracuda spam firewall
security vulnerability
remote authenticated users
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
84.1%
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a … (dot dot) in the file parameter.
Affected configurations
Node
barracuda_networksbarracuda_spam_firewallMatch3.3.01.001
ORbarracuda_networksbarracuda_spam_firewallMatch3.3.03.053
ORbarracuda_networksbarracuda_spam_firewallMatch3.3.03.055
Related
cvelist
cvelist
CVE-2006-4000
2006-08-05 01:00:00
CVE-2006-4081
2006-08-11 10:00:00
nvd
nvd
CVE-2006-4000
2006-08-05 01:04:00
CVE-2006-4081
2006-08-11 10:04:00
cve
cve
CVE-2006-4081
2006-08-11 10:04:00
nessus
nessus
Barracuda Spam Firewall Default Credentials
2006-08-02 00:00:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
84.1%
Related for CVE-2006-4000