[PLUG] Zimbra RCE flaw

[jeffv via plug <plug@lists.phillylinux.org>]

Critical Zimbra RCE flaw exploited to backdoor servers using emails

https://www.bleepingcomputer.com/news/security/critical-zimbra-rce-flaw-exploited-to-backdoor-servers-using-emails/

The Zimbra remote code execution flaw is tracked as CVE-2024-45519 and 
exists in Zimbra's postjournal service, which is used to parse incoming 
emails over SMTP. Attackers can exploit the vulnerability by sending 
specially crafted emails with commands to execute in the CC field, which 
are then executed when the postjournal service processes the email.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug