CVE-2006-4082 - Vulnerability Details - OpenCVE

Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Barracuda Networks	Barracuda Spam Firewall

Configuration 1 [-]

cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html
http://secunia.com/advisories/21258
http://securityreason.com/securityalert/1363
http://www.kb.cert.org/vuls/id/199348
http://www.osvdb.org/29780
http://www.securityfocus.com/archive/1/442249/100/0/threaded
http://www.securityfocus.com/bid/19276
https://exchange.xforce.ibmcloud.com/vulnerabilities/28235

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-08-11T10:00:00

Updated: 2024-08-07T18:57:45.565Z

Reserved: 2006-08-10T00:00:00

Link: CVE-2006-4082

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-08-11T10:04:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-4082

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-08-04T00:00:00", "descriptions": [{"lang": "en", "value": "Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "21258", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21258"}, {"name": "19276", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19276"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/442249/100/0/threaded"}, {"name": "1363", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1363"}, {"name": "barracuda-admin-default-account(28235)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235"}, {"name": "29780", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/29780"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html"}, {"name": "VU#199348", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/199348"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4082", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "21258", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21258"}, {"name": "19276", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19276"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/442249/100/0/threaded"}, {"name": "1363", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1363"}, {"name": "barracuda-admin-default-account(28235)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235"}, {"name": "29780", "refsource": "OSVDB", "url": "http://www.osvdb.org/29780"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html"}, {"name": "VU#199348", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/199348"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:57:45.565Z"}, "title": "CVE Program Container", "references": [{"name": "21258", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21258"}, {"name": "19276", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19276"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/442249/100/0/threaded"}, {"name": "1363", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1363"}, {"name": "barracuda-admin-default-account(28235)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235"}, {"name": "29780", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/29780"}, {"name": "20060804 Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01]", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html"}, {"name": "VU#199348", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/199348"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4082", "datePublished": "2006-08-11T10:00:00", "dateReserved": "2006-08-10T00:00:00", "dateUpdated": "2024-08-07T18:57:45.565Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:barracuda_networks:barracuda_spam_firewall:3.3.03.053:*:*:*:*:*:*:*", "matchCriteriaId": "E9E13260-BC29-45D9-98F3-0C2D7CF72A42", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges."}, {"lang": "es", "value": "Barracuda Spam Firewall (BSF), posiblemente 3.3.03.053, contiene una contrase\u00f1a fija para la cuenta de administraci\u00f3n para accesos desde 127.0.0.1 (localhost), lo cual permite a usuarios locales obtener privilegios."}], "id": "CVE-2006-4082", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-11T10:04:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/21258"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1363"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/199348"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/29780"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/442249/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/19276"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0110.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/21258"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1363"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/199348"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/29780"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/442249/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/19276"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28235"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}