File tree Expand file tree Collapse file tree 1 file changed +4
-7
lines changed
modules/exploits/linux/smtp Expand file tree Collapse file tree 1 file changed +4
-7
lines changed Original file line number Diff line number Diff line change @@ -20,11 +20,10 @@ def initialize(info = {})
20
20
super ( update_info ( info ,
21
21
'Name' => 'Exim And Dovecot Insecure Configuration Command Injection' ,
22
22
'Description' => %q{
23
- This module exploits a command injection vulnerability when using together
24
- Exim and Dovecot with the use_shell option on the Exim configuration. This module
25
- uses the sender address to inject the arbitrary commands, since is one of the
26
- user-controlled variables used by default on example vulnerable configurations. The
27
- module has been tested successfully on Debian Squeeze by using the default exim4 and
23
+ This module exploits a command injection vulnerability against Exim with the
24
+ Dovecot component with the "use_shell" option. It uses the sender's address to
25
+ inject arbitary commands since this is one of the user-controlled variables, which
26
+ has been successfully tested on Debian Squeeze using the default Exim4 with
28
27
dovecot-common packages.
29
28
} ,
30
29
'Author' =>
@@ -216,6 +215,4 @@ def exploit
216
215
217
216
end
218
217
219
-
220
-
221
218
end
You can’t perform that action at this time.
0 commit comments