PT-2006-4926 · Barracuda · Barracuda Spam Firewall

Greg Sinclair · Publicado 2006-08-11 · Atualizado 2018-10-17 · CVE-2006-4082

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barracuda Spam Firewall (BSF) version 3.3.03.053

Description The issue concerns a hardcoded password for the admin account, allowing local users to gain privileges when logging in from 127.0.0.1 (localhost).

Recommendations For Barracuda Spam Firewall (BSF) version 3.3.03.053, consider changing the hardcoded password for the admin account to prevent unauthorized access. As a temporary workaround, restrict local access to the admin account until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2006-4082

Produtos afetados

Barracuda Spam Firewall

Referências · 10

• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html · Nota
• http://securityfocus.com/bid/19276 · Nota
• http://securityreason.com/securityalert/1363 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4082 · Nota de Segurança
• http://osvdb.org/29780 · Nota
• http://securityfocus.com/archive/1/442249/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4082 · Nota
• http://secunia.com/advisories/21258 · Nota
• http://kb.cert.org/vuls/id/199348 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28235 · Nota