CVE-2007-6315 Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID...
MediumCVSS 4.0
EPSS 7.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| real time logic barracudadrive web server | = 3.7.2 | No fix listed |
| real time logic barracudadrive web server home server | = 3.7.2 | No fix listed |
References
- aluigi.altervista.org exploit
- 28032 third-party-advisory vendor-advisory
- 3434 third-party-advisory
- 20071210 Multiple vulnerabilities in BarracudaDrive 3.7.2 mailing-list
- 26805 exploit patch vdb-entry
- barracudadrive-group-chat-dos(38974) vdb-entry