Barracuda Email Security Gateway Appliance (ESG) Vulnerability (CVE-2023-2868)

What is Barracuda Email Security Gateway Appliance (ESG)?



The Barracuda Email Security Gateway Appliance is an email security solution that monitors and filters inbound and outbound emails for unwanted content such as spam and malware.







What is the Attack?


The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar file (tape archives) and their names. An attacker can leverage these file names in a specific manner to allow for remote command execution (RCE).







Why is this …

attack barracuda cve cve-2023-2868 email emails email security email security gateway esg failure gateway malware security security gateway solution spam vulnerability what is