what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Spamtitan Backdoors

Spamtitan Backdoors
Posted Oct 15, 2013
Authored by yello man

Spamtitan, a competitor of Barracuda, suffers from multiple backdoor vulnerabilities.

tags | exploit, vulnerability
SHA-256 | eefd23114986ebb81c6cc9fdb9cd682d71747b087242857dbb99a562ae632283

Spamtitan Backdoors

Change Mirror Download
a few month ago backdoors in barracuda was found

https://www.schneier.com/blog/archives/2013/01/backdoors_built.html
http://www.theregister.co.uk/2013/01/24/barracuda_backdoor/

apparently their competitor spamtitan was quick making fun of them

http://community.spiceworks.com/topic/294951-reported-backdoors-on-barracuda-appliances

without considering they had their own backdoors

the security of the product is a fucking joke, containing everything from authentication bypass to root exploits. there is really no hope, the developers didnt even try. they can patch those specific vulnerabilities, but have no idea what theyre doing. i only scratched its surface.

# cat /home/admin/.ssh/authorized_keys (ssh -l stadmin)
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCyREqWliqOnRZgB1B3V6b0x+bPJUfAU4dOzHCuGRI+D0r3Vv/wrs/6ssnm+AoH7/+PcICFVQdBcGxqLd8an9xOfDaEGuHd9e/Is4dR5dth8ZUp+zalC9rvrnu0nPNaQpJUlkRTEkNw0JZjHK0B6rtWjgM49Jgn3Twnl9i8g+YsjQ==
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtl1th7MBswDC2U6VTYAJ6q4+D9UtCI2gahblYC5980bI/lnyRIA84UUEgeiOfzkaB8FrSZJ12r01/bNQIEagGrCGjHyCGGK0wjpxJMggRguaIFIQzNO6y6l4ZBKh+I8PycIXr0ed918D4di4rubSOGhMEp6ZEpImQ9BsWMagrBE= sean@homer.copperfasten.com
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyc5wKKYYctH7QJ7SK2+21stuziDEkBCXvrIewbq4WH557sbJ9u6/5VTD1uEbYiw8fk+JvK9uRuRiz469ZXmjoBR52hAgDPvwxRMwSbMaceE9FllA6Xg1KKSAhq9oXwHepeUNp74BgmqRxyGHiRUZqST+E8M51mVvt/ZCecvZEgc=

# cat /root/master.password.orig
root:$1$LaCGzmLp$2dNXQ0N7wk8oxppWNsZRT/:0:0::0:0:Charlie &:/root:/bin/csh

and finally, there's a stsupport user in the web

psql> SELECT * FROM USERS;
 id | mailbox_id | priority | policy_id |   email   |   fullname    | user_name | user_level |     report_date     |             password
----+------------+----------+-----------+-----------+---------------+-----------+------------+---------------------+----------------------------------
  3 |          2 |        0 |         1 | stsupport | Support Admin | admin     | S          | 2008-01-01 00:00:00 | fc4e859ffb9f54767a0026773b0583d9

Login or Register to add favorites

File Archive:

March 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    13 Files
  • 3
    Mar 3rd
    15 Files
  • 4
    Mar 4th
    0 Files
  • 5
    Mar 5th
    0 Files
  • 6
    Mar 6th
    16 Files
  • 7
    Mar 7th
    31 Files
  • 8
    Mar 8th
    16 Files
  • 9
    Mar 9th
    13 Files
  • 10
    Mar 10th
    9 Files
  • 11
    Mar 11th
    0 Files
  • 12
    Mar 12th
    0 Files
  • 13
    Mar 13th
    10 Files
  • 14
    Mar 14th
    6 Files
  • 15
    Mar 15th
    17 Files
  • 16
    Mar 16th
    22 Files
  • 17
    Mar 17th
    13 Files
  • 18
    Mar 18th
    0 Files
  • 19
    Mar 19th
    0 Files
  • 20
    Mar 20th
    16 Files
  • 21
    Mar 21st
    13 Files
  • 22
    Mar 22nd
    5 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    0 Files
  • 26
    Mar 26th
    0 Files
  • 27
    Mar 27th
    0 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close