Bug Bounty

In the early morning of the 10th march a letter arrived with the information to all researchers that the barracuda networks bug bounty program became an update in the provided payment procedures. Barracuda Networks decided to speedup the payment process by usage of an official paypal account. All further payments from 2013Q3  to 2014Q1 will be done via paypal by regular official transactions.

--- Mail Copy [Begin] ---

Dear  [RESEARCHER] ,

Barracuda Networks – 3 x Security Demonstration Videos

4 days ago we got the new confirmed patch list of our official partners at barracuda networks. After the last reported vulnerabilities has been patched by the barracuda developer team, we are able to release the advisory and video files publicly. The first vulnerability was located in the exception-handling of the barracuda networks appliance application with client-side attack vector.

The second vulnerability has been discovered in the barracuda networks web security flex appliance application. The third vulnerability was located in the barracuda networks web firewall security appliance application with persistent attack vector. All issue has been patched by by the barracuda devleoper team with coordinated disclosure of the barracuda security team.