Local Privilege Escalation in Zimbra Collaboration Suite via Sudo Misconfiguration

This repository contains a single Metasploit module (modules/exploits/linux/local/zimbra_postfix_priv_esc.rb) that exploits a privilege escalation vulnerability (CVE-2022-3569) in Zimbra Collaboration Suite on Linux. The exploit targets systems where the 'zimbra' user is allowed to execute the postfix binary as root via sudo without a password. The module checks for the presence of the postfix binary, verifies sudo permissions, and then uploads a payload executable to a writable directory (default: /tmp). It then triggers postfix to execute the payload as root, resulting in a root shell or meterpreter session. The module is operational and provides a customizable payload, but is not weaponized for mass exploitation. The main endpoints of interest are the postfix binary, the Zimbra installation directory, and the writable directory used for payload deployment.