CVE-2008-0971

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Barracuda Spam Firewall BSF before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before 3.3.0.052, IM Firewall before 3.1.01.017, and Load Balancer before 2.3.024 allow remote attackers to inject arbitrary web script or...

CVE-2008-0971

CVE-2008-0971 covers multiple XSS flaws in Barracuda Spam Firewall suite. Affected are: Barracuda Spam Firewall (BSF) , Message Archiver , Web Filter , IM Firewall , and Load Balancer with XSS via various inputs (Policy Name field, UI/search inputs, error messages, hidden form fields). Root cause...

CVE-2008-1094

CVE-2008-1094 affects Barracuda Spam Firewall (BSF) before 3.5.12.007. A SQL injection exists in index.cgi (Account View) where the pattern_x parameter can be used with search_count_equals to inject arbitrary SQL, reportedly exploitable by remote authenticated administrators. Potential impacts in...

CVE-2008-1094

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...

Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln

No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...

Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities

The remote Barracuda Spam Firewall device is using a firmware version prior to version 3.5.12.007. It is, therefore, reportedly affected by several issues : - There is a remote SQL injection vulnerability involving the 'patternx' parameter where x=0...n of the 'cgi-bin/index.cgi' script when...

CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability

CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks...

Barracuda mail filtering applications multiple security vulnerabilities

Crossite scripting, SQL injection in Barracuda Spam Firewall...

Barracuda Spam Firewall SQL Injection

CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks...

Barracuda Message Archiver

CVE Numbers: CVE-2008-0971 Vulnerabilities: Multiple Cross-Site Scripting Persistent & Reflected Risk: Medium Attack vector: From Remote Vulnerabilities Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Message Archiver...

Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln

Exploit for hardware platform in category remote exploits ================================================================= Barracuda Spam Firewall v3.5.11.020, Model 600 SQL Injection Vuln ================================================================= CVE Number: CVE-2008-1094 Vulnerability:...

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection

CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable to various SQL Injection attacks...

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection

Barracuda Spam Firewall 3.5.11.020 Model 600 - SQL Injection CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Sp...

Barracuda Spam Firewall v3.5.11.020 Model 600 SQL Injection Vuln

No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...

Yosemite Backup Service Driver Detection

The remote host is running Yosemite Backup, a commercial backup solution for Windows, Linux, and Novell NetWare and targetting small-to-medium sized businesses. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid34756...

Unfixed XSS vulnerability at www.barracudanetworks.com

Security researcher C1c4Tr1Z, has submitted on 30/05/2008 a cross-site-scripting XSS vulnerability affecting www.barracudanetworks.com, which at the time of submission ranked 51447 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2008. It ...

Barracuda垃圾邮件防火墙ldap_test.cgi跨站脚本漏洞

BUGTRAQ ID: 29340 CVECAN ID: CVE-2008-2333 Barracuda Spam Firewall是用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda垃圾邮件防火墙设备的web管理接口存在跨站脚本漏洞，Barracuda设备通过ldaptest.cgi脚本提供LDAP测试功能，这个脚本没有充分的验证用户在email参数中所提供的输入，远程攻击者可以通过向管理接口提交恶意参数执行跨站脚本攻击，导致在浏览器中以Barracuda设备的权限执行任意代码。 Barracuda Networks Barracuda Spam Firewall...

Barracuda Spam Firewall crossite scripting

Crossite scripting with Web Syslog, with web administration login page...

IRM Security Advisory : Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability

Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability CVE Number: CVE-2008-2333 Vulnerability Type / Importance: Cross-Site Scripting Reflected / Medium Problem Discovered 24 April 2008 Vendor Contacted 24 April 2008 Advisory Published 22 May 2008 Abstract The Barracuda Spam Firewal...

Cross site scripting

Cross-site scripting XSS vulnerability in ldaptest.cgi in Barracuda Spam Firewall BSF before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter...