87

This is an attempt to exploit the current remote code execution issue in the EXIM mail server, i.e. CVE-2019-10149. See The Return of the WIZard: RCE in Exim for details and also the kind of exploit you encountered. You are safe if you are not using EXIM or run a fixed version. From the linked article (emphasis added): This vulnerability is exploitable ...


3

There are two distinct questions here: How easy is it to trigger the vulnerability? In other words, how easy is it to make the program do something it isn't supposed to do? How severe is the vulnerability? In other words, if you can trigger it, what can you do with it? The answer to the first question is: very easy. VLC is a video player, and you can ...


3

The reason why CVSS scores are high, even though an issue is difficult to exploit, is because CVSS ignores the likelihood of some things. For example, if an exploit requires the user to open a media file, it gets the attribute "User interaction required". An exploit that would require the user to ignore an explicit warning also gets the attribute "User ...


1

This boils down to a basic networking problem: if the exploit requires you to connect to a listening network service on the target (e.g. exploiting BlueKeep requires you to connect to the RDP service running on the target), you need a way to connect to the target by IP address. You mention the target is behind a NAT, and that port forwarding is not ...


1

It could be that some of the outgoing traffic from the server is blocked. Upon gaining a RCE there are various techniques to check if you can get a connection back: Try ping yourdomain.xx - Check if your domains DNS query is executed by the victim server, if it is, that means you can setup a shell through DNS. You can use a tool like https://github.com/...


1

Remote exploits are exploits that you can run on an external machine. Local exploits are exploits that you can run only with access to the machine (f.e. Privilege Escalations). A remote exploit may be on a host inside an intranet, accessible only by few people, but also inside the internet, accessible by everyone.


Only top voted, non community-wiki answers of a minimum length are eligible