CVE-2006-4001

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.82%

Published

Aug 5, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

Affected Products (3)

barracuda_networks · barracuda_spam_firewallvulnerable

References (12)

http://secunia.com/advisories/21258

http://www.securityfocus.com/archive/1/441857/100/0/threaded

http://www.securityfocus.com/archive/1/442039/100/0/threaded

http://www.securityfocus.com/bid/19276

Exploit

http://www.vupen.com/english/advisories/2006/3104

https://exchange.xforce.ibmcloud.com/vulnerabilities/28213

http://secunia.com/advisories/21258

http://www.securityfocus.com/archive/1/441857/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs