Barracuda Spam Firewall Customers Protected Against Adobe Reader Exploit.

Spam Definition Updates Block Messages Vulnerable to a Cross-Site Scripting Exploit Found in the Adobe Reader Browser Plug-In

MOUNTAIN VIEW, Calif. -- Barracuda Networks, Inc., the leading provider of enterprise-class application security appliances, today announced that the Barracuda Spam Firewall protects its customers against a potentially harmful vulnerability found in Adobe Reader. New spam definitions detect URLs in email messages that could exploit the vulnerability and blocks them.

"The cross-site scripting vulnerability in Adobe Reader presents a real threat to email users," said Stephen Pao, vice president of product management for Barracuda Networks. "For example, an attacker could design an email with an embedded Web link to a PDF file of a reputable site that runs arbitrary code on the user's Web browser. The Barracuda Spam Firewall now protects users from receiving emails that exploit this vulnerability."

The Adobe Reader vulnerability affects users who utilize the Adobe Reader plug-in to view Adobe Acrobat Portable Document Format (PDF) files within their Web browsers. To facilitate features such as populating fields in Acrobat forms, the Adobe Reader has the ability to pass URL parameters in Web links to the Adobe Reader plug-in. However, if scripts are embedded within the URL parameters, an attacker can run code in the user's Web browser. The exploit can run against PDF documents posted on reputable Web sites without requiring an attacker to compromise that site in any way.

To prevent the proliferation of emails that could exploit this vulnerability, the Barracuda Spam Firewall now incorporates rules that look for URLs referencing PDF files that contain URL parameters. When scored with indicators of exploitive scripting, the Barracuda Spam Firewall will automatically block these messages, protecting users from potentially dangerous attacks.

The highly-trained engineers at Barracuda Central, an advanced technology operations center, continually monitor the Internet for trends in spam and virus attacks. When they detect threats and trends, such as the Adobe Reader exploit this week, updates are immediately made to the Barracuda Spam Firewall's spam and virus definitions. Barracuda Energize Updates then automatically arm each Barracuda Spam Firewall with the latest definitions.

Pao added, "For Barracuda Networks, a virus or exploit is akin to a natural disaster that warrants immediate response. Our customers rely on us to deliver the most up-to-date definitions to minimize workflow disruptions. Through Barracuda Energize Updates, Barracuda Spam Firewalls receive the new updates automatically."

Pricing and Availability

All current Barracuda Spam Firewall customers with active Energize Update subscriptions receive automatic and ongoing protection against the latest forms of spam and other email threats at no additional charge. Customers running the version 3.0 spam rule definitions should ensure that their version number is at 3.0.30651 or higher, likewise customers running version 3.1 should ensure that their version 3.1.5316 or higher.

About the Barracuda Spam Firewall

The Barracuda Spam Firewall is available in six models and supports from 1,000 to 30,000 active users with no per user licensing fees. The Barracuda Spam Firewall can be installed in front of the email server in typically less than five minutes and is automatically updated hourly to block new forms of spam and viruses. Its architecture leverages open source spam and virus solutions in conjunction with twelve defense layers: denial of service and security protection, IP block list, rate control, dual layers of virus protection, user specified rules, spam fingerprint check, Intent Analysis, spam rule-based scoring, image analysis, sender authentication, recipient verification and Bayesian analysis. In addition, the entire Barracuda Spam Firewall line features simultaneous inbound and outbound email filtering with the inclusion of sophisticated outbound email filtering techniques such as rate controls, domain restrictions, user authentication (SASL), keyword and attachment blocking, dual layer virus blocking and remote user support for outbound email filtering. The Barracuda Spam Firewall's layered approach minimizes the processing of each email, which yields the performance required to process millions of messages per day. Unlike software solutions, the Barracuda Spam Firewall reduces the load placed on the email server by off-loading both spam and virus filtering. Barracuda Networks also offers the Energize Update subscription service to automatically update the Barracuda Spam Firewall with the latest spam rules and virus definitions.

About Barracuda Networks, Inc.

Barracuda Networks is the leading provider of enterprise-class application security appliances for comprehensive email, Internet and IM protection. Its products protect over 40,000 customers around the world, including Adaptec, Caltrans, CBS, Georgia Institute of Technology, IBM, NASA, Pizza Hut, Union Pacific Railroad Company, and the U.S. Treasury Department. The Barracuda Spam Firewall and Barracuda Spam Firewall - Outbound protect organizations against spam, viruses, and violations to e-mail security policy. The Barracuda Web Filter offers comprehensive content filtering and complete network protection against spyware, malware and viruses. The Barracuda IM Firewall is the only all in one gateway solution for IM traffic management and security. Barracuda Networks is a privately held company with headquarters in Mountain View, California. Barracuda Networks has offices in eight international locations and distributors in over 43 countries. More information is available at www.barracuda.com.