CVE-2007-6315

BarracudaDrive Web Server vulnerability CVE-2007-6315: before version 3.8, remote authenticated users can cause a crash (denial of service) by sending an HTTP request to /eh/chat.ehintf/C that lacks a Connection ID, leading to a NULL pointer dereference. Impact is a partial availability loss per ...

CVE-2007-6314

BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a 1 + plus, 2 . dot, or 3 %80 and similar characters to the file name in the URL...

CVE-2007-6317

Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow 1 remote attackers to read arbitrary files via certain ..\ dot dot backslash sequences in the URL path, or 2 remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ do...

CVE-2007-6314

BarracudaDrive Web Server before 3.8 is vulnerable to information disclosure: remote attackers can read the source code of web scripts by manipulating the file name in the URL (e.g., adding a +, a dot, or %80). Affected product: BarracudaDrive Web Server. Root cause is improper URL handling allow...

CVE-2007-6316

Cross-site scripting XSS vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or HTML via the URI path in an HTTP GET request, which is activated by administrators viewing log files via the Trace page...

CVE-2007-6317

The CVE-2007-6317 entry describes multiple directory traversal vulnerabilities in BarracudaDrive Web Server prior to 3.8. The flaws allow remote attackers to read arbitrary files via certain ..\ sequences in the URL path, and remote authenticated users to delete arbitrary files or create arbitrar...

CVE-2007-6316

CVE-2007-6316 affects BarracudaDrive Web Server prior to 3.8. The vulnerability is an XSS in the URI path of an HTTP GET request, triggered when administrators view log files on the Trace page. Exploitation details indicate remote attackers could inject arbitrary web script/HTML via the request p...

barracuda-multi.txt

Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...

BarracudaDrive <= 3.7.2 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary...

barracudadrive 3.7.2 - Multiple Vulnerabilities

Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization C arbitrary files deleting by users D NULL...

barracudadrive 3.7.2 - Multiple Vulnerabilities

barracudadrive 3.7.2 - Multiple Vulnerabilities Luigi Auriemma Application: BarracudaDrive Web Server http://barracudaserver.com/products/BarracudaDrive/ http://barracudaserver.com/products/HomeServer/ Versions: = 3.7.2 Platforms: Windows Bugs: A directory traversal B scripts source visualization...

BarracudaDrive <= 3.7.2 Multiple Remote Vulnerabilities

Exploit for unknown platform in category remote exploits ======================================================= BarracudaDrive = 3.7.2 Multiple Remote Vulnerabilities ======================================================= Luigi Auriemma Application: BarracudaDrive Web Server...