811 matches found
Barracuda Bug Bounty #9 CT - Cross Site Vulnerabilities
Document Title: =============== Barracuda Bug Bounty 9 CT - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=577 Barracuda Networks Security ID: BNSEC-305 Release Date: ============= 2013-05-09 Vulnerability Laboratory ID VL-ID:...
How I Got Here: Paul Judge
Dennis Fisher talks with Paul Judge, the CTO of Barracuda Labs, about his roots in the security industry, his near-miss with organic chemistry, the start-up and security community in Atlanta and what his next venture might be. Download: 03pauljudge.mp3...
Barracuda Message Archiver 650 - Persistent Vulnerability
Document Title: =============== Barracuda Message Archiver 650 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=743 Release Date: ============= 2013-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 7...
Barracuda Message Archiver 650 - Persistent Vulnerability
Document Title: =============== Barracuda Message Archiver 650 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=743 Release Date: ============= 2013-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 7...
Barracuda Spam Firewall version detection
Binary data 6684.prm...
Barracuda Networks device detection
Binary data 6683.prm...
On a recent Pike background vulnerability description-vulnerability warning-the black bar safety net
SEC Consult,an Austrian security research company, recently released a report on the Barracuda back-office support system to the presence of the vulnerability report. In their assistance, we have taken various measures to fix these loopholes. We provide all this security warning relates to a devi...
Multiple Barracuda Products Security Bypass and Backdoor Unauthorized Access Vulnerabilities (SSH)
Multiple Barracuda products are prone to a security-bypass vulnerability and multiple unauthorized-access vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Barracuda Appliances Default Credentials
The account 'product' or 'emailswitch' is using a default password. A remote, unauthenticated attacker could exploit this to log in as an unprivileged user. After logging in, an attacker can log into the local MySQL server as root without a password. Additionally, getting access to a root shell i...
SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products
SEC Consult Vulnerability Lab Security Advisory 20130124-0 ======================================================================= title: Critical SSH Backdoor in multiple Barracuda Networks Products vulnerable products: Barracuda Spam and Virus Firewall Barracuda Web Filter Barracuda Message...
Multiple Barracuda Networks products backdoors
There are built-in SSH-accessible system accounts with unfiltered IP ranges...
SSH Backdoor accounts in multiple Barracuda Products
Firewall, VPN and spam filtering products from Barracuda Networks contains hidden hard coded backdoor ed SSH accounts, that allow any hacker to remotely log in and root access sensitive information. According to an advisory published by Stefan Viehböck of SEC Consult Vulnerability Lab reported th...
SSH Backdoor accounts in multiple Barracuda Products
Firewall, VPN and spam filtering products from Barracuda Networks contains hidden hard coded backdoor ed SSH accounts, that allow any hacker to remotely log in and root access sensitive information. According to an advisory published by Stefan Viehböck of SEC Consult Vulnerability Lab reported th...
Backdoors Mitigated in a Number of Barracuda Networks Products
Several undocumented remote administration backdoors were discovered in a number of Barracuda Networks products that could provide not only the company with access to the affected appliances, but also provide that access to a number of other outside entities. Barracuda said in a statement it push...
Barracuda Networks SSHd Backdoor Accounts
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Critical SSH Backdoor in multiple Barracuda Networks Products vulnerable products: Barracuda Spam and Virus Firewall Barracuda Web Filter Barracuda Message Archiver...
Barracuda EMail Security - Filter Bypass Vulnerability
Document Title: =============== Barracuda EMail Security - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 Download: http://www.vulnerability-lab.com/resources/videos/744.wmv View: http://www.youtube.com/watch?v=r9cwfFta5OY Release Date:...
Barracuda EMail Security - Filter Bypass Vulnerability
Document Title: =============== Barracuda EMail Security - Filter Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 Download: http://www.vulnerability-lab.com/resources/videos/744.wmv View: http://www.youtube.com/watch?v=r9cwfFta5OY Release Date:...
CVE-2012-5316
Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Barracuda Spam & Virus Firewall 600 Firmware 4.0.1.009 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 Troubleshooting in the Trace route Device module or 2 LDAP Username in the LDAP Configuration modul...
CVE-2012-5316
CVE-2012-5316 affects Barracuda Spam & Virus Firewall 600 firmware up to 4.0.1.009. The issue is cross-site scripting (XSS) in two components: (1) Troubleshooting → Trace route Device module and (2) LDAP Configuration → LDAP Username. Triggered by authenticated remote users, it allows injection o...