CVE-2006-4000: Medium severity Barracuda Networks Barracuda Spam Firewall vulnerability
Directory traversal vulnerability in cgi-bin/previewemail.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4000?
CVE-2006-4000 is classified as a medium severity vulnerability due to its potential to allow unauthorized access to sensitive files.
How does CVE-2006-4000 work?
CVE-2006-4000 exploits directory traversal by allowing attackers to use '..' in the file parameter to read arbitrary files on the server.
What versions of Barracuda Spam Firewall are affected by CVE-2006-4000?
CVE-2006-4000 affects Barracuda Spam Firewall versions 3.3.01.001, 3.3.03.053, and 3.3.03.055.
How do I fix CVE-2006-4000?
To fix CVE-2006-4000, update to the latest version of Barracuda Spam Firewall that addresses this vulnerability.
Who can exploit CVE-2006-4000?
CVE-2006-4000 can be exploited by remote authenticated users who can manipulate the file parameter of the vulnerable CGI script.