CVE-2021-1675 icon indicating copy to clipboard operation
CVE-2021-1675 copied to clipboard

impacket.dcerpc.v5.rpcrt.DCERPCException: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied

Open dudy2kk opened this issue 4 years ago • 20 comments
trafficstars

Hi cube0x0, I am getting the below error.

test

What can be the problem?

Thanks!

dudy2kk avatar Jun 30 '21 15:06 dudy2kk

Is the target a Windows server 2012?

cube0x0 avatar Jun 30 '21 17:06 cube0x0

Is the target a Windows server 2012?

I tried this exploit on Windows server 2012 ,but its not worked the error was same with this pic(access_denied) and I tried use User of Domain Admins then its worked! I wonder how did this err?

evilashz avatar Jun 30 '21 17:06 evilashz

Is the target a Windows server 2012?

The target here is Windows 10 domain joined

dudy2kk avatar Jun 30 '21 17:06 dudy2kk

I am getting the same error on Windows Server 2019

image

dazzyddos avatar Jul 01 '21 03:07 dazzyddos

you can use wireshark to analysis smb protocol for reason. image image so the reason may not allow anonymous access....

Woniuke avatar Jul 01 '21 03:07 Woniuke

I am getting the same error on Windows Server 2019

image

Guys,

exploit not working with SMB2 . disable smb2 and enable smb1.Will work perfectly fine....cheersss

jabriyel avatar Jul 01 '21 09:07 jabriyel

I am getting the same error on Windows Server 2019 image

Guys,

exploit not working with SMB2 . disable smb2 and enable smb1.Will work perfectly fine....cheersss

the smb client default disable smb1at windows server 2016&2019 -_-!

MortalAndTry avatar Jul 01 '21 09:07 MortalAndTry

obraz SMBv1 is enabled on target and still the same error - rpc_s_access_denied

Stivi000 avatar Jul 01 '21 17:07 Stivi000

Can you confirm that the serv can reach your share without any cred ?

Ug0Security avatar Jul 01 '21 19:07 Ug0Security

I had this same issue when trying to run this against a sandbox Windows host which was the dev image Microsoft gives out. By default "User" does not have a password on that image. When I set a password for the user I stopped getting this error. I tried a few things over time, so I can't promise that is the only fix, but it seems to have been what got everything functioning for me.

RapidWolf95 avatar Jul 01 '21 20:07 RapidWolf95

Can you confirm that the serv can reach your share without any cred ?

Due to Microsoft's security regulations, domain member cannot access smb outside the domain

MortalAndTry avatar Jul 02 '21 01:07 MortalAndTry

exploit worked on windows 10 2004 but after I updated it to 21H1 i am getting the same rpc error Screenshot_2021-07-03_11-16-16

thewhiteh4t avatar Jul 03 '21 09:07 thewhiteh4t

Maybe you can try my code to build an anonymous SMB file server.

https://github.com/3gstudent/Invoke-BuildAnonymousSMBServer

3gstudent avatar Jul 10 '21 01:07 3gstudent

也许你可以试试我的代码来构建一个匿名的 SMB 文件服务器。

https://github.com/3gstudent/Invoke-BuildAnonymousSMBServer

Still not

muxueo avatar Jul 10 '21 09:07 muxueo

i come to crash this error too! target is winserver12r2

impacket.dcerpc.v5.rpcrt.DCERPCException: DCERPC Runtime Error: code: 0x5 - rpc_s_access_denied

mumu0215 avatar Jul 22 '21 06:07 mumu0215

Troubleshooted this one and figured it out at least for my end.

The error is due to bad permissions on the file in the share, chmod 644 the dll and the error should go away; the group and others permissions need to be at least readable.

0x10f2c avatar Jul 24 '21 05:07 0x10f2c

trust me this rpc_s_access_denied = Operation did not complete successfully because the file contains a virus or potentially unwanted software turn off the real-time protection and windows firewall

hemazoher avatar Jul 24 '21 15:07 hemazoher

exploit worked on windows 10 2004 but after I updated it to 21H1 i am getting the same rpc error Screenshot_2021-07-03_11-16-16

do you enable any speacial thing? im trying to set up a poc, but i got an error Bad_NETWORK_NAME from metasploit, im not sure if is when it try to connect to the smb server with my dll, or other thing. If i try to run the python one, it just start doing the tries 0,1 and 2 and nothing wokrs, do you mind md me for a little help of how to setup a vulnerable machine? thanks in advance

arphanetx avatar Aug 18 '21 19:08 arphanetx

目标是 Windows 服务器 2012 吗?

Is the target a Windows server 2012? Yes, what is the reason?

ZHOUXINGXING9 avatar Jul 08 '22 13:07 ZHOUXINGXING9