CVE-2006-4001: Barracuda Networks Barracuda Spam Firewall

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

Affected products

• Barracuda Networks Barracuda Spam Firewall: version 3.3.01.001 only; version 3.3.03.053 only; version 3.3.03.055 only

Published 2006-08-05. Last modified 2026-06-16.