medium5.0Public exploit code
CVE-2013-7091
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zimbra Collaboration Server 7.2.2/8.0.2 - Local File Inclusion (Metasploit)2013-12-24 · webapps · linux · Verified
- Zimbra 2009-2013 - Local File Inclusion2013-12-06 · webapps · linux · Verified
Impact
Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter. NOTE: this can be leveraged to execute arbitrary code by obtaining LDAP credentials and accessing the service/admin/soap API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synacor | Zimbra Collaboration Suite | Versions 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/100747
- http://packetstormsecurity.com/files/124321
- http://www.exploit-db.com/exploits/30085
- http://www.exploit-db.com/exploits/30472
- http://www.securityfocus.com/bid/64149
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89527
- http://osvdb.org/100747
- http://packetstormsecurity.com/files/124321
- http://www.exploit-db.com/exploits/30085
- http://www.exploit-db.com/exploits/30472
- http://www.securityfocus.com/bid/64149
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89527