CVE-2024-23614

概要

参考情報

• blog.exodusintel.com/2024/01/25/symantec-messaging-gateway-stack-buffer-overflow-remote-code-execution · Third Party Advisory

symantec messaging gateway のその他の脆弱性

• CVE-2024-23615緊急 9.8A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this…
• CVE-2021-30651中 4.9A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwi…
• CVE-2020-12595中 4.9An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server…
• CVE-2020-12594高 7.2A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full …
• CVE-2014-0160高 7.5悪用確認済み（CISA KEV）The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem…