OSVDB ID: 29780 Title: Barracuda Spam Firewall Admin Account Persistent Hardcoded Password |
Info |
|
|
Dates |
||||
|
|
Description |
By default, Spam Firewall contains hard-coded admin and guest accounts. The guest account may allow an attacker to access the contents of arbitrary files, leading to a loss of confidentiality. With the admin account, an attacker could make arbitrary changes to the system, leading to a loss of integrity. |
Classification |
Location:
Local Access Required,
Remote / Network Access
Attack Type: Authentication Management Impact: Loss of Confidentiality Exploit: Exploit Unknown Disclosure: OSVDB Verified OSVDB: Security Software |
Solution |
Upgrade to firmware version 3.3.0.54 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|