Join our webinar on email and DLP: https://www.brighttalk.com/webcast/7455/64955 If you need help with this exploit and resoliving it for your network, contact us at: http://www.gti1.com/about-us/contact-us/

1. SSH Exploit
Critical SSH Exploit in Barracuda
Appliances, and What You Can Do To Fix It.

2. • Barracuda Spam and Virus Firewall
• Barracuda Web Filter
• Barracuda Message Archiver
• Barracuda Web Application Firewall
• Barracuda Link Balancer
• Barracuda Load Balancer
• Barracuda SSL VPN
• ALL VERSIONS
Systems Effected

3. • Eight default accounts exist
• Used for diagnose by Barracuda on an
appliance
• They cannot be disabled
• Passwords cannot be changed
Issue

4. • Account passwords can be broken with
dictionary attack
• The product account can used to create
new users with administrative privileges
• Root access can be obtained
Exploits

5. • Barracuda currently working on patch
• Until then, make sure to load security
definition 2.0.5 (It’s possible the root
account could still be cracked)
• Prevents unauthorized users from SSH to
appliance
Fix

6. • We can help get you up to date
• Visit us at
http://www.gti1.com/about-us/contact-us/
• Join our upcoming webinar (URL below)
to see how we can help with DLP / Email
Need Help?