CVE-2007-6314

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-12 · updated 2026-06-16
Weakness: CWE-20

Description

BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.

Affected products

Real Time Logic Barracudadrive Web Server: 3.7.2
Real Time Logic Barracudadrive Web Server Home Server: 3.7.2

References

http://aluigi.altervista.org/adv/barradrive-adv.txt
http://secunia.com/advisories/28032
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/archive/1/484833/100/0/threaded
http://www.securityfocus.com/bid/26805
https://exchange.xforce.ibmcloud.com/vulnerabilities/38972
http://aluigi.altervista.org/adv/barradrive-adv.txt
http://secunia.com/advisories/28032
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/archive/1/484833/100/0/threaded
http://www.securityfocus.com/bid/26805
https://exchange.xforce.ibmcloud.com/vulnerabilities/38972

Get alerted when CVE-2007-6314 or the next vulnerability affects your stack