Exploit failed: create failed (with solaris/sunrpc/solaris_sadmind_exec)

[mmiller at hick.org (mmiller at hick.org)]

On Wed, Apr 02, 2008 at 01:50:21PM -0400, arthur zhang wrote:
> However, I got ' Exploit failed: create failed' error when I exploited it. I
> didn't find any details info regarding this error.
>
> What can I do? Is there any way (e.g. increase log level) to give me more
> clue on the error?

This error comes from the sunrpc code in lib/rex/proto/sunrpc/client.rb.
I'm not deeply familiar with this code, but I believe you should be
passing the port of the rpc portmapper and not the port used by sadmind.
The RPC code then talks to the portmapper and determines the port of the
program you're trying to talk to.  By default, the SunRPC exploits set
the RPORT to 111, so I assume this is the expected behavior.  Try
changing to RPORT to 111 and see if it works.