Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Barracuda Spam Firewall垃圾邮件防火墙 'preview_email.cg' 脚本未明安全漏洞
Vulnerability Description
Barracuda Spam Firewall是用于保护邮件服务器的集成硬件和软件垃圾邮件解决方案。 Barracuda垃圾邮件防火墙Login.pm脚本中的guest帐号有硬编码的口令bnadmin99。尽管guest帐号仅有有限的访问能力，但还是可以获取以下信息： * 系统配置，包括IP地址、管理员IP ACL； * 邮件消息日志(但没有消息的内容)； * 垃圾邮件/杀毒定义的版本信息和系统固件版本。 Barracuda的preview_email.cgi脚本中还存在文件泄露漏洞。这个脚本用于从Bar
CVSS Information
N/A
Vulnerability Type
N/A