Metasploit mailing list archives

MS08-067 - worked - revision update - now does not work any more


From: Neo.X at web.de (Florian Roth)
Date: Sun, 30 Nov 2008 00:27:35 +0100

Ha guys - found the problem!!

Never guess what ... 
I activated the Windows Firewall and it worked. Yes! 
Sounds strange - but is true. I reconsidered all changes made recently and
everything I changed was stopping some services. I stopped the Firewall and
the Module fails. Activating the firewall and the module works again. 

Behavior without firewall
[*] Fingerprint: Windows XP Service Pack 2+ - lang:German
[*] Could not determine the exact service pack

Does someone understand this behavior? Am I dumb?

Sorry if this have been discussed before. I checked the archive for some
minutes and did not find anything similar. 

Best wishes and great work ...

-----Original Message-----
From: framework-bounces at spool.metasploit.com [mailto:framework-
bounces at spool.metasploit.com] On Behalf Of Florian Roth
Sent: Sunday, November 30, 2008 12:01 AM
To: framework at spool.metasploit.com
Subject: [framework] MS08-067 - worked - revision update - now does not
work any more

What happend to "Microsoft Server Service Relative Path Stack
Corruption"
Exploit? MS08-067

I checked it against my Windows XP SP2 (DE - German) machine last
weekend
and it worked fine.

Now it tells me
"Could not determine the exact service pack"
although I haven't changed a thing except updating to a new revision
number
of msf.

I checked the same with "Windows XP SP2 (EN - English)" and got the
same
error.
It is - and that is sure - an XP SP2 without any additional Hotfix -
neither
the German nor the English one.

I used Automatic Detection and selected the Languages manually in
Target
selection.
Selecting manually returns "STATUS_OBJECT_NAME_NOT_FOUND (Command=162
WordCount=0)".

What was changed?



Sincerely
Saludos cordiales
Mit freundlichen Gr??en
Florian



_______________________________________________
http://spool.metasploit.com/mailman/listinfo/framework




Current thread: