Details of VAR-200505-0655

ID

VAR-200505-0655

CVE

CVE-2005-0431

TITLE

Barracuda Spam Firewall Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200505-448

DESCRIPTION

Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda as an open mail relay for spam. Barracuda Spam Firewall is prone to a remote security vulnerability

Trust: 1.26

sources: NVD: CVE-2005-0431 // BID: 90253 // VULHUB: VHN-11640

AFFECTED PRODUCTS

vendor:	barracuda	model:	spam firewall	scope:	eq	version:	3.1.10	Trust: 1.6
vendor:	barracuda	model:	networks barracuda spam firewall	scope:	eq	version:	3.1.10	Trust: 0.3

sources: BID: 90253 // CNNVD: CNNVD-200505-448 // NVD: CVE-2005-0431

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2005-0431
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200505-448
value:	HIGH
Trust: 0.6
VULHUB:	VHN-11640
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2005-0431
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
VULHUB:	VHN-11640
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-11640 // CNNVD: CNNVD-200505-448 // NVD: CVE-2005-0431

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-0431

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200505-448

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200505-448

EXTERNAL IDS

db:	NVD	id:	CVE-2005-0431	Trust: 2.0
db:	SECUNIA	id:	14243	Trust: 1.7
db:	XF	id:	19283	Trust: 0.9
db:	CNNVD	id:	CNNVD-200505-448	Trust: 0.7
db:	BUGTRAQ	id:	20050210 BARRACUDA SPAM FIREWALL <= 3.1.10 ACTS AS OPEN RELAY FOR WHITELISTED SENDERS.	Trust: 0.6
db:	BID	id:	90253	Trust: 0.4
db:	VULHUB	id:	VHN-11640	Trust: 0.1

sources: VULHUB: VHN-11640 // BID: 90253 // CNNVD: CNNVD-200505-448 // NVD: CVE-2005-0431

REFERENCES

url:	http://secunia.com/advisories/14243	Trust: 1.7
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/19283	Trust: 1.1
url:	http://marc.info/?l=bugtraq&m=110805534732492&w=2	Trust: 1.0
url:	http://marc.theaimsgroup.com/?l=bugtraq&m=110805534732492&w=2	Trust: 0.9
url:	http://xforce.iss.net/xforce/xfdb/19283	Trust: 0.9
url:	http://marc.info/?l=bugtraq&m=110805534732492&w=2	Trust: 0.1

sources: VULHUB: VHN-11640 // BID: 90253 // CNNVD: CNNVD-200505-448 // NVD: CVE-2005-0431

CREDITS

Unknown

Trust: 0.3

sources: BID: 90253

SOURCES

db:	VULHUB	id:	VHN-11640
db:	BID	id:	90253
db:	CNNVD	id:	CNNVD-200505-448
db:	NVD	id:	CVE-2005-0431

LAST UPDATE DATE

2024-08-14T15:40:53.435000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-11640	date:	2017-07-11T00:00:00
db:	BID	id:	90253	date:	2005-05-02T00:00:00
db:	CNNVD	id:	CNNVD-200505-448	date:	2006-08-23T00:00:00
db:	NVD	id:	CVE-2005-0431	date:	2017-07-11T01:32:17.407

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-11640	date:	2005-05-02T00:00:00
db:	BID	id:	90253	date:	2005-05-02T00:00:00
db:	CNNVD	id:	CNNVD-200505-448	date:	2005-05-02T00:00:00
db:	NVD	id:	CVE-2005-0431	date:	2005-05-02T04:00:00