Full Disclosure: Barracuda Load Balancer Remote Authenticated Root

[Brandon Perry <bperry.volatile () gmail com>]

liek hey guyz

I found this and don't know what to do with it, so here you go. Needs
admin creds.

An admin can run commands on Barracuda Load Balancers by using a
specially crafted NTP server. These are run in the context of the root user.

https://gist.github.com/brandonprry/8947140

https://www.barracuda.com/purchase/evaluation/product/bbfv

Tested against 4.2.2.007 340-series VM.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/