CVE-2006-4001: High severity Barracuda Networks Barracuda Spam Firewall vulnerability
Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4001?
CVE-2006-4001 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2006-4001?
To fix CVE-2006-4001, update the Barracuda Spam Firewall to a version that does not contain the hard-coded guest account password.
What versions of Barracuda Spam Firewall are affected by CVE-2006-4001?
CVE-2006-4001 affects Barracuda Spam Firewall versions 3.3.01.001 through 3.3.03.053.
What can attackers do if CVE-2006-4001 is exploited?
If CVE-2006-4001 is exploited, attackers can read sensitive data including e-mail logs and possibly access e-mail contents.
Is there a workaround for CVE-2006-4001 until I can update?
There is no specific workaround for CVE-2006-4001, so it is highly recommended to update the software as soon as possible.