Improper input validation in Real Time Logic Barracudadrive Web Server
CVE-2007-6314
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.
Affected products
- Real_time_logic Barracudadrive_web_server — versions 3.7.2
- Real_time_logic Barracudadrive_web_server_home_server — versions 3.7.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)