[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Barracuda Load Balancer Remote Authenticated Root
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] Barracuda Load Balancer Remote Authenticated Root
- From: Brandon Perry <bperry.volatile@xxxxxxxxx>
- Date: Tue, 11 Feb 2014 19:04:24 -0600
liek hey guyz
I found this and don't know what to do with it, so here you go. Needs
admin creds.
An admin can run commands on Barracuda Load Balancers by using a
specially crafted NTP server. These are run in the context of the root user.
https://gist.github.com/brandonprry/8947140
https://www.barracuda.com/purchase/evaluation/product/bbfv
Tested against 4.2.2.007 340-series VM.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/