Ticket #113 (new defect)

Opened 1 year ago

Last modified 7 months ago

framwork3 describe exploit send tcp segment incompatible with realserver

Reported by: anonymous Assigned to: hdm
Priority: major Milestone: Metasploit 3.2
Component: framework3 Version:
Keywords: tcp segment option incompatible with realserver Cc:

Description

framework v3 multi/realserver/describe cannot work on realserver 8.0 when framwork 2.7 work well, I got shell use framwork2.7, I tracked it, and modify rex/client.rb, deleted Host header , so that the application layer packet sended by exploit same as framework 2.7 realserver_describe_linux, but to my curious, the check module also cannot work on framework3, I compared the application protocol for RTSP, It same as framework 2.7, the difference that sended packet is TCP segment with append option, so I guess this lead to realserver cannot recognize application data, so the check and exploit function fail. I think this is a error, and on IIS server win2k, it doesnot influence it. my test environment is win2kserversp3 realserver 8.0, framework v3 client run on redhat9, and framwork 2.7 run on cygwin

Change History

12/27/07 11:55:04 changed by hdm

  • milestone set to Metasploit 3.2 Release.

Figure out whether we need to setsockopt()...