Skip to content

Comments

Update apache_activemq_rce_cve_2023_46604.rb to ensure timeout#2

Open
jsherwood0 wants to merge 2 commits intomasterfrom
jsherwood0-patch-apache_activemq_rce-cve-2023_46604-fixhang
Open

Update apache_activemq_rce_cve_2023_46604.rb to ensure timeout#2
jsherwood0 wants to merge 2 commits intomasterfrom
jsherwood0-patch-apache_activemq_rce-cve-2023_46604-fixhang

Conversation

@jsherwood0
Copy link
Owner

Add a timeout to eliminate the hang in the check method

This fix is to ensure that if all else fails, the check will timeout and allow progress to continue instead of hanging on a host that does not reply as expected. This addresses Issue rapid7#19036.

Verification

List the steps needed to make sure this thing works

  • Start msfconsole
  • use exploit/multi/misc/apache_activemq_rce_cve_2023_46604
  • Set RHOSTS and RPORT to host/port that is not responding as ActiveMQ should (e.g., it's down or its not ActiveMQ)
  • check
  • Verify that the check will eventually time out even if it does not receive an expected ActiveMQ response.
  • Verify that the check does not hang on servers that fail to respond as expected.

Add a timeout to eliminate the hang in the check method
Remove rescue that does not handle specific exceptions.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant