Full Disclosure mailing list archives
Barracuda Load Balancer Remote Authenticated Root
From: Brandon Perry <bperry.volatile () gmail com>
Date: Tue, 11 Feb 2014 19:04:24 -0600
liek hey guyz I found this and don't know what to do with it, so here you go. Needs admin creds. An admin can run commands on Barracuda Load Balancers by using a specially crafted NTP server. These are run in the context of the root user. https://gist.github.com/brandonprry/8947140 https://www.barracuda.com/purchase/evaluation/product/bbfv Tested against 4.2.2.007 340-series VM. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Barracuda Load Balancer Remote Authenticated Root Brandon Perry (Feb 12)