Title: Barracuda Spam Firewall Self Whitelist Arbitrary Mail Relay
Info
Disclosure
Feb 10, 2005
Discovery
Unknown
Dates
Exploit
Feb 10, 2005
Solution
Unknown
Description
Spam Firewall contains a flaw that may allow a malicious user to arbitrarily relay mail. The issue is triggered when the sender's domain or Spam firewall's domain is whitelisted. It is possible that the flaw may allow the sending of mail not normally allowed resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Misconfiguration
Impact:
Loss of Integrity
Exploit:
Exploit Public
Disclosure:
OSVDB Verified
OSVDB:
Security Software
Solution
Upgrade to version 3.1.11 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.