CVE-2005-2849: Medium severity Barracuda Networks Barracuda Spam Firewall vulnerability
Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (digdevice.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdumpdevice.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2849?
CVE-2005-2849 is classified as a medium severity vulnerability due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2005-2849?
To fix CVE-2005-2849, you should upgrade the Barracuda Spam Firewall to a version that is not affected by this vulnerability, specifically firmware version 3.1.18 or later.
What software is affected by CVE-2005-2849?
CVE-2005-2849 affects Barracuda Spam Firewall versions 3.1.16 and 3.1.17.
What types of attacks can leverage CVE-2005-2849?
CVE-2005-2849 can be exploited by remote attackers to read source code, determine file existence, and potentially modify files.
Is there a workaround for CVE-2005-2849?
There are no specific workarounds for CVE-2005-2849; the best mitigation is to ensure the software is updated to a patched version.