PT-2006-4926 · Barracuda · Barracuda Spam Firewall

Greg Sinclair · Published 2006-08-11 · Updated 2018-10-17 · CVE-2006-4082

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Barracuda Spam Firewall (BSF) version 3.3.03.053

Description The issue concerns a hardcoded password for the admin account, allowing local users to gain privileges when logging in from 127.0.0.1 (localhost).

Recommendations For Barracuda Spam Firewall (BSF) version 3.3.03.053, consider changing the hardcoded password for the admin account to prevent unauthorized access. As a temporary workaround, restrict local access to the admin account until a more permanent solution is available.

Fix

Related Identifiers

CVE-2006-4082

Affected Products

Barracuda Spam Firewall

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-4082 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html · Note
• http://securityfocus.com/bid/19276 · Note
• http://securityreason.com/securityalert/1363 · Note
• http://osvdb.org/29780 · Note
• http://securityfocus.com/archive/1/442249/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4082 · Note
• http://secunia.com/advisories/21258 · Note
• http://kb.cert.org/vuls/id/199348 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28235 · Note