CVE:CVE-2007-6314
CNNVD:CNNVD-200712-123
BarracudaDrive Web Server存在输入验证漏洞。远程攻击者通过附加一个在URL中文件名的(1) + (plus), (2) . (dot),或(3) %80和相似字符读取web脚本的源代码。
solution:Upgrade real_time_logic barracudadrive_web_server to a higher version than 3.7.2,and avoid the version 3.7.2; Upgrade real_time_logic barracudadrive_web_server_home_server to a higher version than 3.7.2,and avoid the version 3.7.2