Detections
Analytics

Barracuda Web Filter <= 5.0.0.012 Remote Command Execution

high Nessus Plugin ID 85850

Language:

Synopsis

The remote web server contains CGI scripts that are affected by a remote command execution vulnerability.

Description

The remote Barracuda Web Filter device is running a firmware version at or prior to 5.0.0.012. It is, therefore, affected by a remote command execution vulnerability in the web administration interface.
An authenticated, remote attacker can exploit this, via a specially crafted request to index.cgi, to inject system commands as root.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported firmware version.

Solution

Contact the vendor for a fix.

See Also

https://packetstormsecurity.com/files/131366

Plugin Details

Severity: High

ID: 85850

File Name: barracuda_web_filter_5_0_0_012.nasl

Version: 1.5

Type: remote

Family: CGI abuses

Published: 9/9/2015

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:barracuda:web_filter

Required KB Items: installed_sw/Barracuda Web Filter

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 4/9/2015

Reference Information

BID: 74033