In addition to barracuda's 'products' being known for generating spam - they are also known for several remote root level vulnerabilities (all in the web frontend they wrote). I myself found a fairly well publicized vuln a year or so ago, taking advantage of command execution through ';' and '|' with the fact most daemons run with root level rights through sudoers. Last time I checked their open source contribution consisted of a copy of an sles iso (iirc) with no patches included, and I believe gplviolations were investigating them at some point... (yes, this sounds as self promotional and bitter as I generally am)
Slashdot Mirror
In addition to barracuda's 'products' being known for generating spam - they are also known for several remote root level vulnerabilities (all in the web frontend they wrote). I myself found a fairly well publicized vuln a year or so ago, taking advantage of command execution through ';' and '|' with the fact most daemons run with root level rights through sudoers. Last time I checked their open source contribution consisted of a copy of an sles iso (iirc) with no patches included, and I believe gplviolations were investigating them at some point... (yes, this sounds as self promotional and bitter as I generally am)