Unscored CVE-2006-4001 EUVD-2006-3994GHSA-r977-65pr-vm5h

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows …

Published Aug 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

References

ADV-2006-3104 vdb-entry
20060802 RE: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] mailing-list
21258 third-party-advisory
19276 vdb-entry
barracuda-default-account(28213) vdb-entry
20060801 Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] mailing-list