----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Barracuda Spam Firewall Information Disclosure and Default Account

SECUNIA ADVISORY ID:
SA21258

VERIFY ADVISORY:
http://secunia.com/advisories/21258/

CRITICAL:
Less critical

IMPACT:
Security Bypass, Exposure of system information, Exposure of
sensitive information

WHERE:
>From local network

OPERATING SYSTEM:
Barracuda Spam Firewall
http://secunia.com/product/4639/

DESCRIPTION:
Greg Sinclair has reported a vulnerability and a security issue in
Barracuda Spam Firewall, which can be exploited by malicious people
to bypass certain security restrictions and disclose various
information.

1) Input passed to the "file" parameter in preview_email.cgi is not
properly verified, before it is used to view files. This can be
exploited to disclose the contents of arbitrary files via directory
traversal attacks (e.g. message logs).

Example:
https://[host]/cgi-bin/preview_email.cgi?file=/mail/mlog/../[file]

Successful exploitation requires that the user has been
authenticated.

2) A default guest account with a hard-coded password exists in
Login.pm. This can be exploited to disclose various configuration and
version information.

A combination of the two issues can be exploited by a malicious
person to disclose the contents of arbitrary files.

The vulnerability and the security issue have been reported in
firmware versions 3.3.01.001 through 3.3.03.053. Prior versions may
also be affected.

SOLUTION:
Update to firmware version 3.3.0.54.

PROVIDED AND/OR DISCOVERED BY:
Greg Sinclair

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------