Sploitus

Exploit for Immunity Canvas: BRIGHTMAIL_RESTORE

canvas Β· 2017-08-11

Exploit Code

MARKDOWN17 lines
## https://sploitus.com/exploit?id=BRIGHTMAIL_RESTORE
**Name**|  brightmail_restore  
---|---  
**CVE**|  CVE-2017-6327  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| Symantec Brightmail Pre-Auth Command Injection  
**Notes**| CVE Name: CVE-2017-6327  
VENDOR: http://symantec.com  
Notes:   
Tested on: Symantec Messaging Gateway 10.6.3 Appliance  
  
SPECIAL: on SMG versions &lt;= 10.6.3, our linux_foll_write_cow will  
escalate to root privileges on those systems.  
  
Repeatability: Infinite  
References: ['https://www.exploit-db.com/exploits/42519/', 'http://seclists.org/fulldisclosure/2017/Aug/28']  
CVE URL: