Zimbra zmslapd arbitrary module load
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 1.7%
de la publicación al arma0 días
Publicada en NVD16 ago
metasploit27 oct
probabilidad de explotación
1.7%top 24% de las CVE
explotación observada
noninguna fuente lo reporta
Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.
Productos afectados
Synacor · Zimbra Server