CVE-2007-6317

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.04%

Published

Dec 12, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBbarracudadrive 3.7.2 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.

Weaknesses (CWE)

CWE-22

Affected Products (2)

real_time_logic · barracudadrive_web_servervulnerable

real_time_logic · barracudadrive_web_server_home_servervulnerable

References (10)

http://aluigi.altervista.org/adv/barradrive-adv.txt

Exploit

http://secunia.com/advisories/28032

Vendor Advisory

http://securityreason.com/securityalert/3434

http://www.securityfocus.com/archive/1/484833/100/0/threaded