Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

barracuda_networks / barracuda_spam_firewall CVEs

Beta · best-effort

14 CVEs tagged to barracuda_networks / barracuda_spam_firewall — 0 Critical, 7 High, 6 Medium, 1 Low, 0 Unrated.

See this archive with more filtersBack to barracuda_networks vendor archive

CVE-2008-1094

Published Dec 19, 2008

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute arbitrar…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2008-2333

Published May 23, 2008

Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2007-5058

Published Sep 24, 2007

Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2007-1673

Published May 9, 2007

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry st…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2006-4081

Published Aug 11, 2006

preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2006-4082

Published Aug 11, 2006

Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain pri…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2006-4000

Published Aug 5, 2006

Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary f…

CVSS 4.0 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2006-4001

Published Aug 5, 2006

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive infor…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2005-2847

Published Sep 8, 2005

img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2005-2848

Published Sep 8, 2005

Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. (dot dot) in the…

CVSS 5.0 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2005-2849

Published Sep 8, 2005

Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig…

CVSS 6.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2005-0431

Published May 2, 2005

Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-14 of 14 CVEsPage 1 of 1