barracuda networks barracuda spam firewall vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) prior to 3.5.11.025 allows remote malicious users to inject arbitrary web script or HTML via the email parameter.

Barracuda Networks Barracuda Spam Firewall 3.1.10 Barracuda Networks Barracuda Spam Firewall 3.3.03.055 Barracuda Networks Barracuda Spam Firewall 3.3.15.026 Barracuda Networks Barracuda Spam Firewall 3.1.18 Barracuda Networks Barracuda Spam Firewall 3.3.0.54 Barracuda Networks Barracuda Spam Firewall 3.4.10.102 Barracuda Networks Barracuda Spam Firewall Barracuda Networks Barracuda Spam Firewall 3.1.16 Barracuda Networks Barracuda Spam Firewall 3.1.17 Barracuda Networks Barracuda Spam Firewall 3.3.3 Barracuda Networks Barracuda Spam Firewall 3.4 Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053

1 EDB exploit

4

CVSSv2

Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.

Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053 Barracuda Networks Barracuda Spam Firewall 3.3.03.055

1 EDB exploit

7.5

CVSSv2

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 contains a hard-coded password for the guest account, which allows remote malicious users to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

Barracuda Networks Barracuda Spam Firewall 3.3.03.053 Barracuda Networks Barracuda Spam Firewall 3.3.03.055 Barracuda Networks Barracuda Spam Firewall 3.3.01.001

5

CVSSv2

Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote malicious users to read arbitrary files via a .. (dot dot) in the f parameter.

Barracuda Networks Barracuda Spam Firewall 3.1.17 Barracuda Networks Barracuda Spam Firewall 3.1.16

1 EDB exploit

6.4

CVSSv2

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote malicious users to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (2) determine file existence via the -r argument to Tcpdump (tcpdump_device....

Barracuda Networks Barracuda Spam Firewall 3.1.16 Barracuda Networks Barracuda Spam Firewall 3.1.17

7.5

CVSSv2

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote malicious users to execute arbitrary commands via shell metacharacters in the f parameter.

Barracuda Networks Barracuda Spam Firewall 3.1.16 Barracuda Networks Barracuda Spam Firewall 3.1.17

2 EDB exploits

7.5

CVSSv2

preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 up to and including 3.3.03.053 allows remote malicious users to execute commands via shell metacharacters ("|" pipe symbol) in the file parameter. NOTE: the attack can be extended to arbitrary commands by the...

Barracuda Networks Barracuda Spam Firewall 3.3.01.001 Barracuda Networks Barracuda Spam Firewall 3.3.03.053

2 EDB exploits

3.5

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) prior to 3.5.12.007, Message Archiver prior to 1.2.1.002, Web Filter prior to 3.3.0.052, IM Firewall prior to 3.1.01.017, and Load Balancer prior to 2.3.024 allow remote malicious us...

Barracuda Networks Barracuda Spam Firewall Barracuda Networks Barracuda Im Firewall Barracuda Networks Barracuda Load Balancer Barracuda Networks Barracuda Message Archiver Barracuda Networks Barracuda Web Filter

1 Github repository

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote malicious users to inject arbitrary web script or HTML via the username field in a login attempt, which is not properly handled when th...

Barracuda Networks Barracuda Spam Firewall

6.5

CVSSv2

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) prior to 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a pattern_x parameter in a search_count_equals action, as demonstrated by the pa...

Barracuda Networks Barracuda Spam Firewall

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook