CVE-2017-6326

This Metasploit module exploits a command injection vulnerability in Symantec Messaging Gateway by leveraging an authenticated endpoint to execute arbitrary commands as root. It bypasses input validation by encoding the payload in hex and using Perl's ${IFS} technique to avoid blacklisted characters.

This Metasploit module exploits a command injection vulnerability in Symantec Messaging Gateway by leveraging authenticated access to execute arbitrary commands via the backupNow.do endpoint. It uses a Perl payload to bypass character restrictions and deliver a Python-based Meterpreter reverse shell.