Barracuda Firewall 'cert_error' Parameter Cross-Site Scripting Vulnerability

Barracuda Firewall is a firewall distributed by Barracuda Networks Ltd. A cross-site scripting vulnerability exists in the Barracuda Firewall 'certerror' parameter due to a failure to properly filter user-supplied input. An attacker may be able to exploit this issue to execute arbitrary script co...

Barracuda Firewall 6.1.5 - Bypass&Persistent Vulnerabilities

Document Title: =============== Barracuda Firewall 6.1.5 - Bypass&Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC: BNSEC-2067...

Barracuda Firewall 'username'参数HTML注入漏洞

Bugtraq ID:65863 Barracuda Firewall是一款梭子鱼网络有限公司发行的防火墙。 Barracuda Web Firewall 6.1.0.016 Models: X100; X200; X300; X400 & X600 WEB接口User Access Policy Exceptions字段不正确过滤用户提交的'username'参数数据，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Barracuda Web Firewall 6.1.0.016 目前没有详细解决方案提供：...

Barracuda Firewall multiple security vulnerabilities

Crossite scripting, protection bypass...

Barracuda #31 FW - Persistent Access Policy Vulnerability

Document Title: =============== Barracuda 31 FW - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-24 Vulnerability Laboratory...

Barracuda #32 - Filter Bypass & Persistent Vulnerabilities

Document Title: =============== Barracuda 32 - Filter Bypass & Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1069 Barracuda Networks Security ID BNSEC: BNSEC-2069 Release Date: ============= 2014-02-23 Vulnerability Laborator...

CVE-2012-5316

Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...