Microsoft exchange mailbox assistants 15.0.847.40 service msexchangemailboxassistants unquoted service path Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2022-04-19 | Type : local | Platform : windows
This exploit / vulnerability Microsoft exchange mailbox assistants 15.0.847.40 service msexchangemailboxassistants unquoted service path is for educational purposes only and if it is used you will do on your own risk!

[+] Code ...

# Exploit Title: Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path
# Exploit Author: Antonio Cuomo (arkantolo)
# Exploit Date: 2022-04-11
# Vendor : Microsoft
# Version : 15.0.847.40
# Tested on OS: Microsoft Exchange Server 2013 SP1

#PoC :
==============

C:\>sc qc MSExchangeMailboxAssistants
[SC] QueryServiceConfig OPERAZIONI RIUSCITE

NOME_SERVIZIO: MSExchangeMailboxAssistants
TIPO : 10 WIN32_OWN_PROCESS
TIPO_AVVIO : 2 AUTO_START
CONTROLLO_ERRORE : 1 NORMAL
NOME_PERCORSO_BINARIO : C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeMailboxAssistants.exe
GRUPPO_ORDINE_CARICAMENTO :
TAG : 0
NOME_VISUALIZZATO : Microsoft Exchange Mailbox Assistants
DIPENDENZE :
SERVICE_START_NAME : LocalSystem

Microsoft exchange mailbox assistants 15.0.847.40 service msexchangemailboxassistants unquoted service path


Last added Exploits Vulnerabilities

▸ soplanning 1.52.01 (simple online planning tool) - remote code execution (rce) (authenticated) ◂
Discovered: 2024-11-15
Type: webapps
Platform: php
▸ rengine 2.2.0 - command injection (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: multiple
▸ opensis 9.1 - sqli (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: php



Tags:
Microsoft exchange mailbox assistants 15.0.847.40 service msexchangemailboxassistants unquoted service path Vulnerability / Exploit