barracuda networks barracuda spam firewall 3.3.01.001 vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053 Barracuda Networks Barracuda Spam Firewall 3.3.03.055

1 EDB exploit

7.5

CVSSv2

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 contains a hard-coded password for the guest account, which allows remote malicious users to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

Barracuda Networks Barracuda Spam Firewall 3.3.03.053 Barracuda Networks Barracuda Spam Firewall 3.3.03.055 Barracuda Networks Barracuda Spam Firewall 3.3.01.001

7.5

CVSSv2

preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 allows remote malicious users to execute commands via shell metacharacters ("|" pipe symbol) in the file parameter. NOTE: the attack can be extended to arbitrary commands by the...

Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053

2 EDB exploits

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) prior to 3.5.11.025 allows remote malicious users to inject arbitrary web script or HTML via the email parameter.

Barracuda Networks Barracuda Spam Firewall 3.1.10 Barracuda Networks Barracuda Spam Firewall 3.3.03.055 Barracuda Networks Barracuda Spam Firewall 3.3.15.026 Barracuda Networks Barracuda Spam Firewall 3.1.18 Barracuda Networks Barracuda Spam Firewall 3.3.0.54 Barracuda Networks Barracuda Spam Firewall 3.4.10.102 Barracuda Networks Barracuda Spam Firewall Barracuda Networks Barracuda Spam Firewall 3.1.16 Barracuda Networks Barracuda Spam Firewall 3.1.17 Barracuda Networks Barracuda Spam Firewall 3.3.3 Barracuda Networks Barracuda Spam Firewall 3.4 Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053

1 EDB exploit

7.2

CVSSv2

Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges.

Barracuda Networks Barracuda Spam Firewall 3.3.03.053

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook