CVE-2006-4001
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.
Login.pm en Barracuda Spam Firewall (BSF) 3.3.01.001 hasta la 3.3.03.053 contiene un cosntraseña fuertemente codificada para la cuenta de invitado, lo cual permite que atacantes remotos puedan leer información sensible como el log del e-mail, y posiblemente los contenidos del e-mail y la contraseña de admin.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-08-04 CVE Reserved
- 2006-08-05 CVE Published
- 2024-04-10 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/21258 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/441857/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/442039/100/0/threaded | Mailing List | |
| http://www.vupen.com/english/advisories/2006/3104 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/28213 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://www.securityfocus.com/bid/19276 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Barracuda Networks Search vendor "Barracuda Networks" | Barracuda Spam Firewall Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" | 3.3.01.001 Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" and version "3.3.01.001" | - |
Affected
| ||||||
| Barracuda Networks Search vendor "Barracuda Networks" | Barracuda Spam Firewall Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" | 3.3.03.053 Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" and version "3.3.03.053" | - |
Affected
| ||||||
| Barracuda Networks Search vendor "Barracuda Networks" | Barracuda Spam Firewall Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" | 3.3.03.055 Search vendor "Barracuda Networks" for product "Barracuda Spam Firewall" and version "3.3.03.055" | - |
Affected
| ||||||