CVE-2007-6314

BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.

Link	Resource
http://aluigi.altervista.org/adv/barradrive-adv.txt	Exploit
http://www.securityfocus.com/bid/26805	Exploit Patch
http://secunia.com/advisories/28032	Vendor Advisory
http://securityreason.com/securityalert/3434
https://exchange.xforce.ibmcloud.com/vulnerabilities/38972
http://www.securityfocus.com/archive/1/484833/100/0/threaded

Configuration 1

cpe:2.3:a:real_time_logic:barracudadrive_web_server:3.7.2:*:*:*:*:*:*:* cpe:2.3:a:real_time_logic:barracudadrive_web_server_home_server:3.7.2:*:*:*:*:*:*:*

---

Published : 2007-12-12 12:46

Updated : 2018-10-15 09:52

---

NVD link : CVE-2007-6314

Mitre link : CVE-2007-6314

No products.

CWE-20