CVE-2005-2847: barracuda_networks barracuda_spam_firewall
Vulnerability summary
CVE-2005-2847 is a high (CVSS 7.5) vulnerability in barracuda_networks barracuda_spam_firewall. EPSS estimates a 53.37% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 6 public exploits are recorded.
Timeline
- 08-09-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
53.37%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 53.37% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
6 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (securitytracker.com)
Maturity: unknown
Exploit Reference (securiweb.net)
Maturity: unknown
Show all 6 exploits
Barracuda IMG.PL Remote Command Execution
exploit/unix/webapp/barracuda_img_exec
Maturity: weaponized
Barracuda - IMG.pl Remote Command Execution (Metasploit)
Maturity: poc
Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit)
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Barracuda_networks1 product
- barracuda_spam_firewall3.1.16 | 3.1.17
1 vendor · 1 product
References
5 links- www.securitytracker.com/alerts/2005/Sep/1014837.htmlVDB EntryX Refsource SECTRACKExploitPatchVendor Advisory