Known Vulnerabilities for products from Barracuda Networks

Listed below are 14 of the newest known vulnerabilities associated with the vendor "Barracuda Networks".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2008-2333 Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote at... 4.3 - MEDIUM 2008-05-23 2018-10-11
CVE-2008-1094 SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows r... 6.5 - MEDIUM 2008-12-19 2018-10-11
CVE-2008-0971 Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message ... 3.5 - LOW 2008-12-19 2018-10-15
CVE-2007-5058 Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.1... 4.3 - MEDIUM 2007-09-24 2018-10-15
CVE-2007-1673 unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of servic... 7.8 - HIGH 2007-05-09 2018-10-16
CVE-2007-1669 zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with virusdef b... 7.8 - HIGH 2007-05-09 2018-10-16
CVE-2006-4082 Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0... 7.2 - HIGH 2006-08-11 2018-10-17
CVE-2006-4081 preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands ... 7.5 - HIGH 2006-08-11 2018-10-17
CVE-2006-4001 Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account,... 7.5 - HIGH 2006-08-05 2018-10-17
CVE-2006-4000 Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053... 4 - MEDIUM 2006-08-05 2018-10-17
CVE-2005-2849 Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1)... 6.4 - MEDIUM 2005-09-08 2016-10-18
CVE-2005-2848 Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attac... 5 - MEDIUM 2005-09-08 2017-07-11
CVE-2005-2847 img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands vi... 7.5 - HIGH 2005-09-08 2016-10-18
CVE-2005-0431 Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which al... 7.5 - HIGH 2005-05-02 2017-07-11