Barracuda多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 Barracuda多个产品存在安全漏洞。 Barracuda所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 Barracuda CudaTel Communication Server 2.x Barracuda CudaTel Communication Server 3.x Barracuda Firewall 6.x Barracuda Link Balancer 2.x Barracuda...

Barracuda Backup "remote_host"脚本注入漏洞

Barracuda Networks Backup是一款网络备份解决方案。 由于通过"remotehost" POST参数传递到Extern Backup模块的输入在被使用前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中注入并执行任意HTML和脚本代码。 0 Barracuda Backup Barracuda Backup 固件版本4.3.06或5.1.00已修复此漏洞，建议用户下载使用： http://www.barracudanetworks.com/ns/products/backupoverview.php...

Barracuda Message Archiver crossite scripting

Web interface crossite scripting...

Barracuda Message Archiver 650 - Persistent Web Vulnerability

Document Title: =============== Barracuda Message Archiver 650 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=751 Barracuda Networks Security ID BNSEC: 703 Release Date: ============= 2014-02-18 Vulnerability Laboratory ID...

Threatglass Tool Gives Deep Look Inside Compromised Sites

Trying to enumerate the compromised sites on the Internet is a Sisyphian task. Luckily, it’s not a task that anyone really needs to perform any longer, especially now that Barracuda Labs has released its new Threatglass tool, a Web-based frontend that allows users to query a massive database of...

Barracuda IMG.PL Command Execution - Ver2 (CVE-2005-2847)

A command execution vulnerability has been reported in Barracuda Networks Barracuda Spam Firewall. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Barracuda Networks Backup 'Extern Backup' HTML注入漏洞

Bugtraq ID:65850 Barracuda Networks Backup是一款网络备份解决方案。 Barracuda Networks Backup 'Extern Backup'模块不正确过滤用户提交的remotehost值输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 Barracuda Networks Backup 目前没有详细解决方案提供： http://www.barracudanetworks.com/ns/products/backupoverview.php div...

Barracuda Firewall 'username'参数HTML注入漏洞

Bugtraq ID:65863 Barracuda Firewall是一款梭子鱼网络有限公司发行的防火墙。 Barracuda Web Firewall 6.1.0.016 Models: X100; X200; X300; X400 & X600 WEB接口User Access Policy Exceptions字段不正确过滤用户提交的'username'参数数据，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Barracuda Web Firewall 6.1.0.016 目前没有详细解决方案提供：...

Barracuda Networks Bug Bounty #31 Firewall - Persistent Access Policy Vulnerability

Document Title: =============== Barracuda Networks Bug Bounty 31 Firewall - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-2...

Barracuda Networks Firewall Bug Bounty #32 - Filter Bypass & Persistent Web Vulnerabilities

Document Title: =============== Barracuda Networks Firewall Bug Bounty 32 - Filter Bypass & Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1069 Barracuda Networks Security ID BNSEC: BNSEC-2069 Release Date: =============...

Barracuda Networks Bug Bounty #35 - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks Bug Bounty 35 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361 Release Date: ============= 2014-02-21 Vulnerability...

Barracuda Bug Bounty #36 Firewall - Client Side Exception Handling Web Vulnerability

Document Title: =============== Barracuda Bug Bounty 36 Firewall - Client Side Exception Handling Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1102 Barracuda Networks Security ID BNSEC: BNSEC-2398...

Barracuda Firewall multiple security vulnerabilities

Crossite scripting, protection bypass...

Barracuda Web Firewall 6.1.0.016 Cross Site Scripting

Document Title: =============== Barracuda Networks Bug Bounty 31 Firewall - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-2...

Barracuda Networks Backup - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks Backup - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=784 BARRACUDA NETWORK SECURITY ID: BNSEC-885 Release Date: ============= 2014-02-25 Vulnerability Laboratory ID VL-ID...

Barracuda Networks Backup - Persistent Web Vulnerability

Document Title: =============== Barracuda Networks Backup - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=784 BARRACUDA NETWORK SECURITY ID: BNSEC-885 Release Date: ============= 2014-02-25 Vulnerability Laboratory ID VL-ID...

Barracuda #31 FW - Persistent Access Policy Vulnerability

Document Title: =============== Barracuda 31 FW - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-24 Vulnerability Laboratory...

Barracuda Networks WebFilter Script Insertion

Document Title: =============== Barracuda Networks Bug Bounty 35 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361 Release Date: ============= 2014-02-21 Vulnerability...

Barracuda #31 FW - Persistent Access Policy Vulnerability

Document Title: =============== Barracuda 31 FW - Persistent Access Policy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1070 Barracuda Networks Security ID BNSEC: BNSEC-2068 Release Date: ============= 2014-02-24 Vulnerability Laboratory...

Barracuda #32 - Filter Bypass & Persistent Vulnerabilities

Document Title: =============== Barracuda 32 - Filter Bypass & Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1069 Barracuda Networks Security ID BNSEC: BNSEC-2069 Release Date: ============= 2014-02-23 Vulnerability Laborator...