Barracuda warns two flaws could combine to give attackers root access

One flaw in Barracuda's Email Security Gateway can let attackers change an appliance's global configuration. The other can let attackers with admin permissions run operating-system commands as root and affects six products. Barracuda says combining the flaws could bypass authorization and give attackers root access. Exploitation requires access to an affected device's administrative interface. Patches are available.