CVE-2007-6315

BarracudaDrive Web Server <3.8 - DoS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6315.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in BarracudaDrive Web Server, including directory traversal, script source visualization, arbitrary file deletion, NULL pointer crash, and HTML injection. It provides specific HTTP requests to exploit these vulnerabilities.

Description

Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.

Exploits (1)

exploitdb WORKING POC
remotewindows
https://www.exploit-db.com/exploits/4713

The exploit demonstrates multiple vulnerabilities in BarracudaDrive Web Server, including directory traversal, script source visualization, arbitrary file deletion, NULL pointer crash, and HTML injection. It provides specific HTTP requests to exploit these vulnerabilities.

Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: BarracudaDrive Web Server <= 3.7.2
Auth required
Prerequisites: Network access to the target server · Valid user credentials for certain exploits
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/484833/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28032
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3434
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26805
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38974

Scores

EPSS 0.0713
EPSS Percentile 93.4%

Details

CWE
CWE-119
Status published
Products (2)
real_time_logic/barracudadrive_web_server 3.7.2
real_time_logic/barracudadrive_web_server_home_server 3.7.2
Published Dec 12, 2007
Tracked Since Feb 18, 2026