CVE-2015-0961

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging t...

Information disclosure

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging t...

CVE-2015-0961

CVE-2015-0961 affects Barracuda Web Filter prior to version 8.1.0.005. When SSL Inspection is enabled, upstream X.509 certificates are not properly verified, enabling a MITM attacker to spoof upstream servers and access sensitive information via a crafted certificate. The OpenVAS entry corroborat...

CVE-2015-0962

Barracuda Web Filter (versions 7.x and 8.x prior to 8.1.0.005) is affected by CVE-2015-0962 due to SSL Inspection sharing the same root CA certificate across devices, enabling potential MITM of SSL sessions. The issue is mitigated by upgrading to firmware 8.1.0.005 or later, which uses unique def...

CVE-2015-0961

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-4992

Name of the Vulnerable Software and Affected Versions Barracuda Web Filter versions 7.x through 8.0.x Barracuda Web Filter version 8.1.0.004 and earlier Description The issue allows remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the trust relationship of ...

CVE-2015-0961: Undefined Security Weakness

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-0962: Undefined Security Weakness

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging t...

PT-2015-4991

Name of the Vulnerable Software and Affected Versions Barracuda Web Filter versions prior to 8.1.0.005 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate when SSL Inspection is enabled, due to the lack of verificati...

Barracuda Web Filter insecurely performs SSL inspection

Overview Barracuda Web Filter prior to version 8.1.0.005 does not properly check upstream certificate validity when performing SSL inspection, and delivers one of three default root CA certificates across multiple machines for SSL inspection. Description According to Barracuda Networks, the...

HP LoadRunner magentproc.exe Stack Buffer Overflow (CVE-2013-4800)

A stack buffer overflow vulnerability has been detected in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the magentproc.exe. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to...