CVE-2006-4001

2006-08-0501:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

References

secunia.com/advisories/21258

www.securityfocus.com/archive/1/441857/100/0/threaded

www.securityfocus.com/archive/1/442039/100/0/threaded

www.securityfocus.com/bid/19276

www.vupen.com/english/advisories/2006/3104

exchange.xforce.ibmcloud.com/vulnerabilities/28213