CVE-2005-2847
EXPLOITEDBarracuda Spam Firewall <3.1.17 - Command Injection
Title source: llmExploitation Summary
CVE-2005-2847 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, including a Metasploit module exploits/unix/webapp/barracuda_img_exec.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Barracuda Spam Firewall's img.pl CGI script to achieve remote command execution. It sends a crafted HTTP request with a malicious 'f' parameter to execute arbitrary commands.
Description
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
Exploits (3)
This Metasploit module exploits a directory traversal vulnerability in Barracuda Spam Firewall's img.pl CGI script to achieve remote command execution. It sends a crafted HTTP request with a malicious 'f' parameter to execute arbitrary commands.
This Metasploit module exploits a command injection vulnerability in Barracuda Spam Firewall's img.pl script by manipulating the 'f' parameter to execute arbitrary commands via shell metacharacters. The exploit sends a crafted HTTP GET request to trigger the vulnerability and includes a check function to verify target susceptibility.
This Metasploit module exploits a directory traversal vulnerability in Barracuda Spam Firewall's img.pl CGI script to achieve remote command execution. It sends a crafted HTTP request with a malicious path to execute arbitrary commands on the target system.