module

Zimbra Collaboration Server LFI

Disclosed	Created
Dec 6, 2013	May 30, 2018

Disclosed

Dec 6, 2013

Created

May 30, 2018

Description

This module exploits a local file inclusion on Zimbra 8.0.2 and 7.2.2. The vulnerability
allows an attacker to get the LDAP credentials from the localconfig.xml file. The stolen
credentials allow the attacker to make requests to the service/admin/soap API. This can
then be used to create an authentication token for the admin web interface. This access
can be used to achieve remote code execution. This module has been tested on Zimbra
Collaboration Server 8.0.2 with Ubuntu Server 12.04.

Authors

rubina119
Mekanismen [email protected]

Platform

Linux

Architectures

x86

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


    msf > use exploit/unix/webapp/zimbra_lfi
    msf exploit(zimbra_lfi) > show targets
        ...targets...
    msf exploit(zimbra_lfi) > set TARGET < target-id >
    msf exploit(zimbra_lfi) > show options
        ...show and set options...
    msf exploit(zimbra_lfi) > exploit

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report