{"id":9963,"date":"2013-01-24T10:10:08","date_gmt":"2013-01-24T18:10:08","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=9963"},"modified":"2013-01-24T10:10:08","modified_gmt":"2013-01-24T18:10:08","slug":"barracuda-appliances-found-to-have-a-secret-backdoor","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/barracuda-appliances-found-to-have-a-secret-backdoor\/","title":{"rendered":"Barracuda Appliances Found to Have a Secret Backdoor"},"content":{"rendered":"

When you buy a security appliance, the last thing you expect is to have a backdoor baked into the product intentionally. But that\u2019s exactly what\u2019s been discovered<\/a> in a wide variety of Barracuda<\/a>\u2019s network appliance products.<\/p>\n

A security researcher with SEC Consult recently discovered that these appliances could be accessed by accounts created by Barracuda, from a range of IP addresses (including hundreds outside Barracuda\u2019s control), without having to provide authentication. According to Barracuda, these accounts are intended for use by remote technical support. They have released an update<\/a> for the affected appliances that tightens the security of most of these support accounts, but it does not remove or secure them entirely.<\/p>\n

These remote-support accounts can still be accessed by IP addresses in ranges not entirely controlled by Barracuda, which also puts these IP addresses at additional risk of hacking by those seeking to gain access to these vulnerable appliances. It is advisable for users of affected Barracuda appliances to update their security definitions to v2.0.5 as soon as possible. Some people are also recommending to block port 22<\/a> on the firewall, though many will find this measure problematic.<\/p>\n","protected":false},"excerpt":{"rendered":"

When you buy a security appliance, the last thing you expect is to have a backdoor baked into the product intentionally. But that\u2019s exactly what\u2019s been discovered in a wide variety of Barracuda\u2019s network appliance products. A security researcher with SEC Consult recently discovered that these appliances could be accessed by accounts created by Barracuda, […]<\/p>\n","protected":false},"author":6,"featured_media":9967,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[5],"tags":[],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n