what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from John Petrusa

PinApp Mail-SeCure Access Control Failure

Posted Oct 2, 2013

Authored by Core Security Technologies, John Petrusa | Site coresecurity.com

Core Security Technologies Advisory - A security vulnerability was discovered in PineApp Mail-SeCure Suite, allowing a non-privileged attacker to get a root shell by sending a specially crafted command from the Mail-SeCure console. A valid user account is needed to launch the attack, so this is a privileged escalation vulnerability that can be exploited locally only. All Mail-SeCure versions prior to 3.70 are affected.

tags | exploit, shell, root

advisories | CVE-2013-4987

SHA-256 | d5784fca160f27d4512fc94c354e9db07e14b87205f4f9a1c92f11ca795c0ad8

Download | Favorite | View