{"uuid": "1e47c939-f725-4fc8-a1f3-c2a6ffb00156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-1000282", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/haraka.py", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"xychix \", \"smfreegard\", \"Adam Cammack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"The Haraka SMTP server comes with a plugin for processing attachments.\\n        Versions before 2.8.9 can be vulnerable to command injection\", \"disclosure_date\": \"2017-01-26\", \"fullname\": \"exploit/linux/smtp/haraka\", \"is_install_path\": true, \"mod_time\": \"2025-04-23 17:11:37 +0000\", \"name\": \"Haraka SMTP Command Injection\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"Harakiri\"]}, \"path\": \"/modules/exploits/linux/smtp/haraka.py\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/smtp/haraka\", \"references\": [\"CVE-2016-1000282\", \"EDB-41162\", \"URL-https://github.com/haraka/Haraka/pull/1606\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"linux x64\", \"linux x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:23.039622Z"}