Barracuda ssl vpn Authentication Bypass Vulnerability

Release date:
Updated on: 2013-01-26

Affected Systems:
Barracuda Networks Web Application Firewall
Barracuda Networks Spam and Virus Firewall
Barracuda Networks Link Balancer
Barracuda Networks SSL VPN
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57540
 
Barracuda ssl vpn is an out-of-the-box VPN device.
 
In earlier versions of Barracuda ssl vpn 2.0.5, the Identity Authentication Bypass Vulnerability exists. Attackers can exploit this vulnerability to bypass the authentication mechanism and unauthorized access to affected applications.
 
<* Source: S. Viehb & #195; & #182; ck
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Barracuda Networks
------------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.barracudanetworks.com/ns/products/spam_overview.php