109 matches found
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall...
Barracuda Spam Firewall <= 3.5.11 - 'ldap_test.cgi' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29340/info Barracuda Spam Firewall is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
Barracuda Spam Firewall version detection
Binary data 6684.prm...
Barracuda - IMG.pl Remote Command Execution (Metasploit)
$Id: barracudaimgexec.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Barracuda IMG.PL Remote Command Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Barracuda...
Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities (SQLi, XSS)
Binary data 4795.prm...
CVE-2008-1094
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...
Sql injection
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...
CVE-2008-1094
CVE-2008-1094 affects Barracuda Spam Firewall (BSF) before 3.5.12.007. A SQL injection exists in index.cgi (Account View) where the pattern_x parameter can be used with search_count_equals to inject arbitrary SQL, reportedly exploitable by remote authenticated administrators. Potential impacts in...
CVE-2008-1094
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...
Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln
No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...
Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities
The remote Barracuda Spam Firewall device is using a firmware version prior to version 3.5.12.007. It is, therefore, reportedly affected by several issues : - There is a remote SQL injection vulnerability involving the 'patternx' parameter where x=0...n of the 'cgi-bin/index.cgi' script when...
Barracuda mail filtering applications multiple security vulnerabilities
Crossite scripting, SQL injection in Barracuda Spam Firewall...
SecurityGateway < 1.0.2 Administration Interface username Field Remote Overflow
The remote host is running Alt-N's SecurityGateway for Exchange/SMTP, an email spam firewall for Exchange and SMTP servers. The version of SecurityGateway installed on the remote host is earlier than 1.0.2. Such versions are reportedly affected by a buffer overflow that can be triggered using a...
Barracuda垃圾邮件防火墙ldap_test.cgi跨站脚本漏洞
BUGTRAQ ID: 29340 CVECAN ID: CVE-2008-2333 Barracuda Spam Firewall是用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda垃圾邮件防火墙设备的web管理接口存在跨站脚本漏洞，Barracuda设备通过ldaptest.cgi脚本提供LDAP测试功能，这个脚本没有充分的验证用户在email参数中所提供的输入，远程攻击者可以通过向管理接口提交恶意参数执行跨站脚本攻击，导致在浏览器中以Barracuda设备的权限执行任意代码。 Barracuda Networks Barracuda Spam Firewall...
Barracuda Spam Firewall crossite scripting
Crossite scripting with Web Syslog, with web administration login page...
CVE-2008-2333
Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...
CVE-2008-2333
The CVE-2008-2333 entry concerns a reflected Cross-Site Scripting (XSS) vulnerability in Barracuda Spam Firewall (BSF) via the ldap_test.cgi script. According to the sources, the vulnerability arises because the script does not properly validate the email parameter, enabling an attacker to inject...