CVE-2007-6314 BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the...
MediumCVSS 5.0
EPSS 7.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| real time logic barracudadrive web server | = 3.7.2 | No fix listed |
| real time logic barracudadrive web server home server | = 3.7.2 | No fix listed |
References
- aluigi.altervista.org exploit
- 28032 third-party-advisory vendor-advisory
- 3434 third-party-advisory
- 20071210 Multiple vulnerabilities in BarracudaDrive 3.7.2 mailing-list
- 26805 exploit patch vdb-entry
- barracudadrive-source-code-disclosure(38972) vdb-entry