梭子鱼邮件安全网关CVE-2023-2868命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://teamt5.org/tw/posts/cve-2023-2868-barracuda-email-security-gateway-vulnerability/
• https://www.secrss.com/articles/55238
• https://www.ha.edu.cn/upload/202306/09/202306091718130282.pdf
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/1244/
• https://www.sohu.com/a/679951216_120205504
• https://www.network-box.cn/wp-content/uploads/ITBR-202309CN.pdf
• https://www.51cto.com/article/779230.html
• https://www.goupsec.com/news/15286.html
• https://news.qq.com/rain/a/20230825A06EH600
• https://blog.csdn.net/qq_32277727/article/details/135566831
• https://network-box.cn/%E6%A2%AD%E5%AD%90%E9%B1%BC-esg-%E9%9B%B6%E6%97%A5%E6%BC%8F%E6%B4%9E/
• https://zhuanlan.zhihu.com/p/634858298
• https://www.yijinglab.com/industry/20230526011041
• https://rivers.chaitin.cn/blog/cqctthh0lnee0vjd593g
• https://baike.baidu.com/item/%E6%A2%AD%E5%AD%90%E9%B1%E8%9E%8E/5142339
• https://cert.360.cn/warning/detail?id=64d0966c22adc884abcd7dae
• https://www.infoobs.com/article/20231120/62653.html
• https://cloud.tencent.com/developer/article/2438048
• https://www.venustech.com.cn/new_type/aqjx/20230526/25672.html
• https://bbs.antiy.cn/thread-207636-1-1.html
• https://nvd.nist.gov/vuln/detail/cve-2023-2868
• https://trust.barracuda.com/security/information/esg-vulnerability
• https://www.picussecurity.com/resource/blog/cve-2023-2868-barracuda-esg-vulnerability-actively-exploited-by-unc4841
• https://www.tenable.com/blog/cve-2023-2868-barracuda-and-fbi-recommend-replacing-email-security-gateway-esg-devices
• https://fortiguard.fortinet.com/threat-signal-report/5191
• https://www.ic3.gov/CSA/2023/230823.pdf
• https://github.com/advisories/GHSA-898g-hmh5-hrcr
• https://help.bitsighttech.com/hc/en-us/articles/15369298209943-Barracuda-Email-Security-Gateway-CVE-2023-2868
• https://www.itsc.cuhk.edu.hk/user-trainings/information-security-best-practices/barracuda-email-security-gateway-appliance-esg-vulnerability-cve-2023-2868/