PT-2012-2092 · Barracuda · Barracuda Link Balancer 330

Publicado 2012-08-23 · Atualizado 2012-08-24 · CVE-2011-5114

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Barracuda Link Balancer 330 Firmware versions 1.3.2.005 and earlier

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the zoneid or scope parameter.

Recommendations For Barracuda Link Balancer 330 Firmware versions 1.3.2.005 and earlier, consider restricting access to the Authoritative DNS - DNS Zones page until a fix is available. As a temporary workaround, avoid using the zoneid and scope parameters in the affected page to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5114

Produtos afetados

Barracuda Link Balancer 330

Referências · 3

• http://vulnerability-lab.com/get_content.php?id=33 · Nota
• http://securitytracker.com/id?1026283 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-5114 · Nota de Segurança