CVE-2015-0961 | BDVDB-2026-69557 Detail

Description#

Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/534407
https://techlib.barracuda.com/BWF/UpdateSSLCerts
https://www.barracuda.com/support/techalerts
https://blog.barracuda.com/2015/04/28/barracuda-delivers-updated-ssl-inspection-feature/

Exploit#

No public exploit known

History#

Version 12015-05-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.