image.png

IP: 172.25.90.72

Port: 9024

Want to run this Docker container locally?

docker run -d -p 9024:80 --name Flag-red45 --restart always joshbeck2024/ctf-roundcube-1.2.0-flag-red45

Welcome you iCSI’s secure email portal!

The flag can be found in: /flag/flag.txt

Points: 500

Walkthrough:

We are given the username and password. If you log in, you’ll see that the version is 1.2.0

image.png

Some Google-Fu will turn up this article related to CVE-2017-16651

<https://gist.github.com/thomascube/3ace32074e23fca0e6510e500bd914a1>