This Metasploit module will grab the AD account saved in Symantec Messaging Gateway and then decipher it using the disclosed Symantec PBE key. Note that authentication is required in order to successfully grab the LDAP credentials, and you need at least a read account. Version 10.6.0-7 and earlier are affected.
ce4d98e3ed5298b5eb1bb1ce3efb88e21b8acfcc6d771dbeb1c07e1620610087Symantec Brightmail versions 10.6.0-7 and below save the AD password in a place where it can be retrieved.
88d3d8221a33175dc392a1dde9b17ac2dce0186a796efa0efdcc5c79c77bb457
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed