Two vulnerabilities in Barracuda's Email Security Gateway can be chained to grant root access without login. The first flaw, an authorization bypass, lets attackers restore crafted configuration backups. The second, a command injection, executes commands as root when combined with the bypass. Barracuda released patches for the affected firmware versions to address these issues.
Read the full story at thehackernews.com.
Photo: ColossusCloud / Pixabay
