← back
CVE-2006-4081

CVE-2006-4081

EPSS 4.2%
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file parameter. NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/2136unverifiedexploitdbwww.exploit-db.com/exploits/2145unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.htmlhttp://secunia.com/advisories/21258http://securityreason.com/securityalert/1363https://exchange.xforce.ibmcloud.com/vulnerabilities/28234http://www.securityfocus.com/archive/1/442132/100/0/threadedhttp://www.securityfocus.com/archive/1/442249/100/0/threadedhttp://www.securityfocus.com/bid/19276