CVE-2010-20109

HIGH

Barracuda Spam & Virus Firewall "locale" Path Traversal

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2010-20109 has a selected CVSS score of 8.7 (high); EIP currently links 2 catalogued exploits.

Description

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, allowing attackers to inject traversal sequences and null-byte terminators to access arbitrary files on the underlying system. By exploiting this flaw, unauthenticated remote attackers can retrieve sensitive configuration files such as /mail/snapshot/config.snapshot, potentially exposing credentials, internal settings, and other critical data.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 22, 2025 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

SSL VPN

Browse Barracuda Networks / SSL VPN

Default status: unaffected

CVE ListThrough 2010-10affected

Spam & Virus Firewall

Browse Barracuda Networks / Spam & Virus Firewall

Default status: unaffected

CVE ListThrough 4.1.1.021affected

Web Application Firewall

Browse Barracuda Networks / Web Application Firewall

Default status: unknown

CVE ListThrough 2010-10affected

Proofs of concept

2

Catalogued exploits

ExploitDBBarracuda Networks Spam & Virus Firewall 4.1.1.021 - Remote Configuration RetrievalExploitDB exploitby ShadowHatesYouNot analyzed1 file
ExploitDB
PoC details
MetasploitBarracuda Multiple Product "locale" Directory TraversalMetasploit auxiliary PoCby Tiago Ferreira <tiago.ccna@gmail.com>Not analyzed1 file

Ruby

Metasploit
PoC details

References

5