CVE-2010-20109

Description

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, allowing attackers to inject traversal sequences and null-byte terminators to access arbitrary files on the underlying system. By exploiting this flaw, unauthenticated remote attackers can retrieve sensitive configuration files such as /mail/snapshot/config.snapshot, potentially exposing credentials, internal settings, and other critical data.

PUBLISHED Reserved 2025-08-20 | Published 2025-08-21 | Updated 2025-08-22 | Assigner VulnCheck

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

Credits

ShadowHatesYou finder

References

www.exploit-db.com/exploits/15130 exploit

web.archive.org/...1244/http://secunia.com/advisories/41609/ third-party-advisory

raw.githubusercontent.com/...arracuda_directory_traversal.rb exploit

www.vulncheck.com/...multiple-products-locale-path-traversal third-party-advisory

cve.org (CVE-2010-20109)

nvd.nist.gov (CVE-2010-20109)

Download JSON