It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda Campus Help Center / Reference
Overview Documentation

Back to Knowledgebase

BNSEC-01168 unauthenticated, remotely exploitable, HTTP header injection vulnerability in multiple products

  • Type: Knowledgebase
  • Date changed: 2 years ago

Solution #00006864

Scope:

Fixed in Spam Firewall 6.0.2.002
Fixed in Web Application Firewall 7.8
Fixed in Message Archiver 3.5
Fixed in Load Balancer 4.2.2

Severity: High

Description:

The firmware versions above fix an unauthenticated remote HTTP header injection vulnerability.

To ensure maximum protection Barracuda Networks recommends that all customers upgrade to the latest generally available firmware and enable all definition updates.

Credits:

Abhinav Karnawat \/ w4rri0r \/,Nathaniel Wakelam,Rafael Pablos,Zakaria Amous

Link to this page:

https://campus.barracuda.com/solution/50160000001456TAAQ