Description
Multiple vulnerabilities exist in Barracuda Networks products due to improper validation of user-controlled input. User-controllable input supplied to the embedded web server is not properly sanitized for illegal path delimiting characters prior to being used to access files. A specially crafted HTTP request containing directory traversal sequences could allow remote attackers to conduct traversal attacks.
Remediation
The vendor has released Security Definition update v2.0.4 that addresses these vulnerabilities.
References
Related Vulnerabilities
WordPress Plugin Simple Backup Multiple Vulnerabilities (2.7.11)
WordPress Plugin WP Fastest Cache Local File Inclusion (0.8.5.9)
WordPress Plugin Leaflet Maps Marker Pro Multiple Vulnerabilities (1.5.7)
WordPress Plugin Simple Job Board Directory Traversal (2.9.3)
WordPress Plugin Recent Backups Arbitrary File Download (0.7)