Barracuda Firmware 5.0.0.012 Post-Auth Remote Root

Discussion in 'News Aggregator' started by Packet Storm, 10 Apr 2015.

  1. Packet Storm

    Packet Storm Guest

    This Metasploit module exploits a remote command execution vulnerability in Barracuda Firmware versions 5.0.0.012 and below by exploiting a vulnerability in the web administration interface. By sending a specially crafted request it's possible to inject system commands while escalating to root do to relaxed sudo configuration on the local machine.

    Continue reading...
     

Share This Page

Loading...