CVE-2005-2848: barracuda_networks barracuda_spam_firewall

EPSS trend

Probability

8.77%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.77% on 21-09-2026

21-09-202621-10-2026

EPSS score

8.77%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securiweb.net)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasecgiVerified
Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit)
Maturity: poc

References

6 links

securiweb.net/wiki/Ressources/AvisDeSecurite/2005.1X Refsource MISCExploitPatchVendor Advisory
www.securitytracker.com/alerts/2005/Sep/1014837.htmlVDB EntryX Refsource SECTRACKPatchVendor Advisory
secunia.com/advisories/16683/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
marc.info?l=bugtraq&m=112560044813390&w=2Mailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/22120VDB EntryX Refsource XF
www.securityfocus.com/bid/14710VDB EntryX Refsource BIDExploitPatch

Related vulnerabilities

CVE-2007-1673amavisamavis+103.18%19y ago09-05-2007 01:00unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.CVE-2007-5058barracuda_networksbarracuda_spam_firewall1.57%19y ago24-09-2007 22:00Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when the Monitor Web Syslog screen is open.CVE-2005-2849barracuda_networksbarracuda_spam_firewall1.39%21y ago08-09-2005 04:00Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.CVE-2005-2847barracuda_networksbarracuda_spam_firewall53.37%21y ago08-09-2005 04:00img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.CVE-2005-0431barracuda_networksbarracuda_spam_firewall1.28%21y ago15-02-2005 05:00Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam.CVE-2008-2333barracuda_networksbarracuda_spam_firewall4.53%18y ago23-05-2008 15:00Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

All vulnerabilities inbarracuda_spam_firewall

CVE-2005-2848: barracuda_networks barracuda_spam_firewall

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References