Merge pull request #1 from interference-security/tnspoision_checker_bug_fix

Fixed false positive bug in Oracle TNS Listener Checker module

Author: interference-security

modules/auxiliary/scanner/oracle/tnspoison_checker.rb

@@ -42,8 +42,19 @@ def run_host(ip)
       send_packet = tns_packet("(CONNECT_DATA=(COMMAND=service_register_NSGR))")
       sock.put(send_packet)
       packet = sock.read(100)
+      hex_packet = Rex::Text.to_hex(packet, prefix = ':')
+      split_hex = hex_packet.split(":")
       find_packet = /\(ERROR_STACK=\(ERROR=/ === packet
-      find_packet == true ? print_error("#{ip}:#{rport} is not vulnerable ") : print_good("#{ip}:#{rport} is vulnerable")
+      #find_packet == true ? print_error("#{ip}:#{rport} is not vulnerable ") : print_good("#{ip}:#{rport} is vulnerable")
+      if find_packet == true
+            print_error("#{ip}:#{rport} is not vulnerable")
+      elsif split_hex[5] == "02"
+            print_good("#{ip}:#{rport} is vulnerable")
+      elsif split_hex[5] == "04"
+            print_error("#{ip}:#{rport} is not vulnerable")
+      else
+            print_error("#{ip}:#{rport} might not be vulnerable")
+      end
       # TODO: Module should report_vuln if this finding is solid.
       rescue ::Rex::ConnectionError, ::Errno::EPIPE
       print_error("#{ip}:#{rport} unable to connect to the server")