CVE-2017-6326
CRITICALSymantec Messaging Gateway < 10.6.3 - Remote Code Execution
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-6326.
PoCs published by Mehmet Ince, Mehmet Ince <[email protected]>, including Metasploit module exploits/linux/http/symantec_messaging_gateway_exec.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in Symantec Messaging Gateway by leveraging an authenticated endpoint to execute arbitrary commands as root. It bypasses input validation by encoding the payload in hex and using Perl's ${IFS} technique to avoid blacklisted characters.
Description
The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.
Exploits (2)
This Metasploit module exploits a command injection vulnerability in Symantec Messaging Gateway by leveraging an authenticated endpoint to execute arbitrary commands as root. It bypasses input validation by encoding the payload in hex and using Perl's ${IFS} technique to avoid blacklisted characters.
This Metasploit module exploits a command injection vulnerability in Symantec Messaging Gateway by leveraging authenticated access to execute arbitrary commands via the backupNow.do endpoint. It uses a Perl payload to bypass character restrictions and deliver a Python-based Meterpreter reverse shell.
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H