Description
Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges.
References
- 21258 third-party-advisory
- 19276 vdb-entry
- 20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] mailing-list
- 1363 third-party-advisory
- barracuda-admin-default-account(28235) vdb-entry
- 29780 vdb-entry
- 20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] mailing-list
- VU#199348 third-party-advisory