{"uuid": "a0e329cf-cdf3-4299-a0f4-4fd69835098e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-5930", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/pfadmin_set_protected_alias.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"php\", \"author\": [\"Jan-Frederik Rieckers\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Postfixadmin installations between 2.91 and 3.0.1 do not check if an\\n          admin is allowed to delete protected aliases. This vulnerability can be\\n          used to redirect protected aliases to an other mail address. Eg. rewrite\\n          the postmaster@domain alias.\", \"disclosure_date\": \"2017-02-03\", \"fullname\": \"auxiliary/admin/http/pfadmin_set_protected_alias\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Postfixadmin Protected Alias Deletion Vulnerability\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/pfadmin_set_protected_alias.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/pfadmin_set_protected_alias\", \"references\": [\"CVE-2017-5930\", \"URL-https://github.com/postfixadmin/postfixadmin/pull/23\", \"BID-96142\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:49.106821Z"}