Vulnerabilities > CVE-2005-2849 - Remote Security vulnerability in Barracuda Networks Barracuda Spam Firewall 3.1.16/3.1.17
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Hardware | 2 |