关联漏洞
标题：
Apache James 安全漏洞
(CVE-2023-26269)
描述：Apache James是美国阿帕奇（Apache）基金会的一个完全用 Java 编写的开源 Smtp 和 Pop3 邮件传输代理和 Nntp 新闻服务器。 Apache James 3.7.3 及之前版本存在安全漏洞，该漏洞源于默认提供无需身份验证的 JMX 管理服务，攻击者利用该漏洞可以进行权限升级。
描述
CVE-2023-26269: Misconfigured JMX in Apache James
介绍
# CVE-2023-26269: Misconfigured JMX in Apache James
By default Apache James opens a JMXRMI service that listens on localhost, port 9999. Because the JMX is misconfigured to allow unauthenticated access, an attacker that has local access to the machine running James can use a [“MLet attack”](https://mogwailabs.de/en/blog/2019/04/attacking-rmi-based-jmx-services/) in order to load arbitrary MBeans and execute malicious Java code.<br/>
Because the application requires elevated privileges to listen on SMTP, POP3, IMAP (25, 110, 143) ports, the application will usually be run as the “root” user increasing the impact of a potential Local Privilege Escalation (LPE) attack.
### Vendor Disclosure:
The vendor's disclosure and fix for this vulnerability can be found [here](https://lists.apache.org/thread/2z44rg93pflbjhvbwy3xtz505bx41cbs).
### Proof Of Concept:
More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2023-26269/blob/main/Apache%20James%20-%20CVE-2023-26269.pdf).
文件快照
[4.0K] /data/pocs/1888e92d6e03328aae0e6387ffd9b04f3b8c87e9
├── [1.6M] Apache James - CVE-2023-26269.pdf
└── [1.0K] README.md
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。