CVE-2005-2849: Barracuda Networks Barracuda Spam Firewall

Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days.

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device.cgi) or (3) modify files in the cgi-bin directory via the -w argument to Tcpdump.

Affected products

• Barracuda Networks Barracuda Spam Firewall: version 3.1.16 only; version 3.1.17 only

Published 2005-09-08. Last modified 2026-06-16.