CVE-2015-0961

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging t...

CVE-2015-0962

Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging t...

CVE-2015-0961

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-0962

Barracuda Web Filter (versions 7.x and 8.x prior to 8.1.0.005) is affected by CVE-2015-0962 due to SSL Inspection sharing the same root CA certificate across devices, enabling potential MITM of SSL sessions. The issue is mitigated by upgrading to firmware 8.1.0.005 or later, which uses unique def...

CVE-2015-0961

CVE-2015-0961 affects Barracuda Web Filter prior to version 8.1.0.005. When SSL Inspection is enabled, upstream X.509 certificates are not properly verified, enabling a MITM attacker to spoof upstream servers and access sensitive information via a crafted certificate. The OpenVAS entry corroborat...

Barracuda Networks Web Filter Security Bypass Vulnerability

Barracuda Networks Web Filter is a web security gateway from Barracuda Networks USA. The gateway supports content filtering, advanced policies, and web threat protection. A security vulnerability exists in Barracuda Networks Web Filter versions prior to 8.1.0.005, which is caused by the program...

Unspecified Vulnerability in Barracuda Networks Web Filter

Barracuda Networks Web Filter is a Web security gateway from Barracuda Networks USA. The gateway supports content filtering, advanced policies, and web threat protection. A security vulnerability exists in versions prior to Barracuda Networks Web Filter 8.1.0.005, which stems from multiple device...

Barracuda Web Filter insecurely performs SSL inspection

Overview Barracuda Web Filter prior to version 8.1.0.005 does not properly check upstream certificate validity when performing SSL inspection, and delivers one of three default root CA certificates across multiple machines for SSL inspection. Description According to Barracuda Networks, the...

Barracuda Web Interface Arbitrary Command Injection Vulnerability

Barracuda is an umbrella term for a family of hard disk drives. An arbitrary command injection vulnerability exists in the Barracuda web interface. The vulnerability could be exploited to allow an attacker to execute arbitrary commands on the affected device...

Barracuda Firmware 5.0.0.012 - (Authenticated) Remote Command Execution (Metasploit)

Barracuda Firmware 5.0.0.012 - Authenticated Remote Command Execution Metasploit Exploit Title: Barracuda Firmware 'Barracuda Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Firmware Version 'xort', metasploit module , 'Version' = '$Revision: 12345 $',...

Barracuda Firmware 5.0.0.012 Post-Auth Remote Root

Exploit Title: Barracuda Firmware 'Barracuda Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Firmware Version 'xort', metasploit module , 'Version' = '$Revision: 12345 $', 'References' = 'none', 'none', , 'Platform' = 'linux', 'Privileged' = true, 'Arch'...

Barracuda Firmware <= 5.0.0.012 reporting Post Auth Remote Root Exploit

This Metasploit module exploits a remote command execution vulnerability in Barracuda Firmware versions 5.0.0.012 and below by exploiting a vulnerability in the web administration interface. By sending a specially crafted request it's possible to inject system commands while escalating to root do...

Barracuda Firmware 5.0.0.012 - (Authenticated) Remote Command Execution (Metasploit)

Exploit Title: Barracuda Firmware 'Barracuda Firmware %q This module exploits a remote command execution vulnerability in the Barracuda Firmware Version 'xort', metasploit module , 'Version' = '$Revision: 12345 $', 'References' = 'none', 'none', , 'Platform' = 'linux', 'Privileged' = true, 'Arch'...

Barracuda Networks IM Firewall HTML Injection Vulnerability

Barracuda Networks IM Firewall is an instant messaging solution from Barracuda Networks that integrates an IM server, client management and security measures. The solution provides keyword identification and reporting, file transfer, IM traffic identification and logging. An HTML injection...

Barracuda Networks IM Firewall Cross-Site Scripting Vulnerability

Barracuda Networks IM Firewall is an instant messaging solution from Barracuda Networks that integrates an IM server, client management and security measures. The solution provides keyword identification and reporting, file transfer, IM traffic identification and logging. A cross-site scripting...

Multiple HTML Injection Vulnerabilities in Barracuda Networks SSL VPN 480

Barracuda Networks SSL VPN 480 is an all-in-one hardware and software SSL VPN solution from Barracuda Networks. The solution provides secure remote access to internal network resources without the need to install a client browser. An HTML injection vulnerability exists in Barracuda Networks SSL V...

Barracuda Networks Web Application Firewall 660 HTML Injection Vulnerability

Barracuda Networks Web Application Firewall 660 is a web application firewall from Barracuda Networks. An HTML injection vulnerability exists in the cgi-mod/index.cgi file in the Barracuda Networks Web Application Firewall 660. When a user browses the affected site, their browser will execute...

Barracuda Networks Cloud Series - Filter Bypass Vulnerability

Exploit for php platform in category web applications Document Title: =============== Barracuda Networks Cloud Series - Filter Bypass Vulnerability Affected Products: ==================== Barracuda Networks Product: Cloud Control Center 2014 Q2 Technical Details & Description:...