Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...

CVE-2006-0833

CVE-2006-0833 concerns multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified vectors targeted at the Add URL and Suggest Category modules. Affected product: Barracuda Directory 1.1. T...

CVE-2006-0833

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...

[SA18965] Barracuda Directory Multiple Script Insertion Vulnerabilities

TITLE: Barracuda Directory Multiple Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18965 VERIFY ADVISORY: http://secunia.com/advisories/18965/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Barracuda Directory 1.x http://secunia.com/product/8189/...

Barracuda Spam Firewall 3.1.18 - Command Execution (Metasploit)

Barracuda Spam Firewall 3.1.18 - Command Execution Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Barracuda Spam Firewall < 3.1.18 Command Execution Exploit (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Barracuda Spam Firewall < 3.1.18 Command Execution Exploit (meta)

Exploit for cgi platform in category web applications ================================================================= Barracuda Spam Firewall 'Barracuda IMG.PL Remote Command Execution', 'Version' = '$Revision: 1.0 $', 'Authors' = 'Nicolas Gregoire ' , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' =...

CVE-2005-2847

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-2849

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to 1 read portions of source code via the -f option to Dig digdevice.cgi, 2 determine file existence via the -r argument to Tcpdump tcpdumpdevice.cgi or 3 modify files in the...

CVE-2005-2848

Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2005-2849

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to 1 read portions of source code via the -f option to Dig digdevice.cgi, 2 determine file existence via the -r argument to Tcpdump tcpdumpdevice.cgi or 3 modify files in the...

CVE-2005-2848

CVE-2005-2848: Directory traversal vulnerability in img.pl on Barracuda Spam Firewall firmware 3.1.16/3.1.17 allows remote attackers to read arbitrary files via a .. in the f parameter. The vulnerability impacts confidentiality (partial) with no integrity/availability impact stated. No remediatio...

CVE-2005-2849

CVE-2005-2849 affects Barracuda Spam Firewall firmware 3.1.16 and 3.1.17. The vulnerability is an argument injection in CGI scripts that grant attackers the following capabilities: read portions of source code via the -f option to Dig (dig_device.cgi); determine file existence via the -r option t...

CVE-2005-2848

Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

CVE-2005-2847

Barracuda Spam Firewall (IMG.PL) contains a remote command execution vulnerability in img.pl that allows an attacker to execute arbitrary shell commands via the f parameter. Affected firmware versions include 3.1.16 and 3.1.17; exploits exist in public advisories and Metasploit modules reference ...

CVE-2005-2847

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

2005.1.txt

ID : 2005.1 Product : Barracuda Spam Firewall Appliance Vendor : Barracuda networks Affected product : firmware Published date : 01/09/2005 Initial Vendor contact 2005-06-14 CVE : CVE-MAP-NOMATCH Solution : Install Firmware 3.1.18 Reference URL :...

Barracuda Spam Firewall < Firmware 3.1.18 Multiple Vulnerabilities

Binary data 3200.prm...

[SecuriWeb.2005.1] - Barracuda SPAM firewall advisory

ID : 2005.1 Product : Barracuda Spam Firewall Appliance Vendor : Barracuda networks Affected product : firmware = 3.1.17 Class : Directory Traveral, Remote Execution, Password Retrieving Remote : yes local : na Author : Francois Harvey fharvey at securiweb dot net Published date : 01/09/2005...