CVE-2008-2333

Summary

CVE	CVE-2008-2333
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2008-05-23 15:32:00 UTC
Updated	2018-10-11 20:40:00 UTC
Description	Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the email parameter.

Risk And Classification

Problem Types: CWE-79

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.10	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.16	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.17	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.18	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.0.54	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.01.001	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.03.053	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.03.055	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.15.026	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.3	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.4	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.4.10.102	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.10	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.16	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.17	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.1.18	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.0.54	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.01.001	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.03.053	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.03.055	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.15.026	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.3.3	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.4	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	3.4.10.102	All	All	All
Hardware	Barracuda Networks	Barracuda Spam Firewall	All	All	All	All

References

Reference	Source	Link	Tags
Barracuda Spam Firewall "email" Cross-Site Scripting - Secunia Advisories - Vulnerability Intelligence - Secunia.com	SECUNIA	secunia.com
Barracuda Spam Firewall Input Validation Hole in 'ldap_test.cgi' Permits Cross-Site Scripting Attacks - SecurityTracker	SECTRACK	www.securitytracker.com
IBM X-Force Exchange	XF	exchange.xforce.ibmcloud.com
Advisory 027 » Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability » IRM - Information Risk Management Plc	MISC	www.irmplc.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	VUPEN	www.vupen.com
Barracuda Spam Firewall 'ldap_test.cgi' Cross-Site Scripting Vulnerability	BID	www.securityfocus.com	Patch
SecurityFocus	BUGTRAQ	www.securityfocus.com
Error 404 (Not Found) \| Barracuda Networks	CONFIRM	www.barracudanetworks.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.