cve/2015/CVE-2015-7611.md

CVE-2015-7611

Description

Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.

POC

Reference

• http://packetstormsecurity.com/files/133798/Apache-James-Server-2.3.2-Arbitrary-Command-Execution.html
• http://packetstormsecurity.com/files/156463/Apache-James-Server-2.3.2-Insecure-User-Creation-Arbitrary-File-Write.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Mr-Tree-S/POC_EXP