CVE-2006-4000

Directory traversal vulnerability in cgi-bin/previewemail.cgi in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter...

CVE-2006-4001

CVE-2006-4001 concerns Barracuda Spam Firewall (BSF): affected firmware versions 3.3.01.001–3.3.03.053 contain a hard-coded password for the guest account, enabling remote attackers to read sensitive data such as e-mail logs and potentially e-mail contents and the admin password. Related connecte...

CVE-2006-4000

CVE-2006-4000 affects Barracuda Spam Firewall (BSF) 3.3.01.001–3.3.03.053. The vulnerability is a directory traversal in cgi-bin/preview_email.cgi that allows remote authenticated users to read arbitrary files by supplying a ".." in the file parameter. Related entry CVE-2006-4081 notes that BSF 3...

CVE-2006-4001

Login.pm in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password...

Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02]

Title: Barracuda Arbitrary File Disclosure Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 29 May 2006 Overview: Barracuda Spam...

Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01]

Title: Barracuda Hardcoded Password Vulnerability Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected] Discovered on: 28 May 2006 Overview: Barracuda Sp...

Barracuda Spam Firewall Default Credentials

The firmware version of the Barracuda Spam Firewall detected on the remote device contains a hard-coded password for the 'guest' user account. Additionally, the device reportedly also contains a hard-coded password for the 'admin' account as well as the device fails to properly filter user-suppli...

CVE-2006-2133

SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 linkdirtarget and 2 linkidtarget parameter, possibly involving the linkedit functionality...

Sql injection

SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 linkdirtarget and 2 linkidtarget parameter, possibly involving the linkedit functionality...

CVE-2006-2133

SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 linkdirtarget and 2 linkidtarget parameter, possibly involving the linkedit functionality...

CVE-2006-2133

CVE-2006-2133 describes an SQL injection vulnerability in the BoonEx Barracuda 1.1 and earlier, exposed via index.php. The affected component is the web application's parameter handling for (1) link_dir_target and (2) link_id_target, potentially involving the link_edit functionality. The underlyi...

Barracuda vuln.

Barracuda vuln. Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.boonex.com/products/barracuda/ affected versions:1.1 and prior orginal advisory:http://pridels.blogspot.com/2006/04/barracuda-vuln.html Vuln. Description: Barracuda Directory contains a flaw that allows a remote sql injectio...

Barracuda Spam Firewall multiple buffer overflows

Buffer overflows on LHA and ZOO archive parsing...

[Full-disclosure] Barracuda LHA archiver security bug leads to remote compromise

Topic: Barracuda LHA archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.10045 Credits: Jean-Sebastien...

[Full-disclosure] Barracuda ZOO archiver security bug leads to remote compromise

Topic: Barracuda ZOO archiver security bug leads to remote compromise Announced: 2006-04-03 Product: Barracuda Spam Firewall Vendor: http://www.barracudanetworks.com/ Impact: Remote shell access Affected product: Barracuda with firmware 3.3.03.022 AND spamdef 3.0.9388 Credits: Jean-Sebastien...

Stack overflow

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...

CVE-2006-0855

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...

CVE-2006-0855

CVE-2006-0855 affects zoo 2.10 and earlier, where a stack-based buffer overflow in the fullpath function (misc.c) can be triggered by a crafted zoo file, allowing user-assisted remote code execution. Public reports reference Barracuda Spam Firewall usage; Debian DSA-991-1 notes a fix in older woo...

CVE-2006-0855

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected...

CVE-2006-0833

Multiple cross-site scripting XSS vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the 1 Add URL and 2 Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are...