CVE-2017-6320
HighSummary
A remote command injection vulnerability exists in the Barracuda Load Balancer product line, allowing an authenticated user to execute arbitrary shell commands and gain root privileges. The issue arises from unsanitized data being processed in a system call when the delete_assessment command is issued.
Risk Assessment
This vulnerability could lead to severe security breaches, allowing attackers to gain full control over the system. It may result in data loss and compromise of system integrity.
Recommendation
It is recommended to upgrade to version 6.1.0.003 or later to mitigate this vulnerability. Additionally, conducting a security audit to identify potential threats is advisable.
Other vulnerabilities in Barracuda Load Balancer
See allOriginal NVD description (English source)
A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003 (2017-01-17)) in which an authenticated user can execute arbitrary shell commands and gain root privileges. The vulnerability stems from unsanitized data being processed in a system call when the delete_assessment command is issued.