Barracuda’s email security gateways bitten by make-me-root vulns
Security company Barracuda warns that attackers are exploiting a pre-authentication authorization bypass bug and a command-injection vulnerability in its popular Email Security Gateway (ESG) products that, when chained, could allow the crims to run commands with root privileges.
Summary from The Register Security.
