[Plugins-writers] Error Message: read_stream_connection_unbuffered: fd=1000001 is closed

From: Paul Bellefeuille (nessusd@private)
Date: Mon Nov 13 2006 - 18:13:46 PST


Hello All,

I have been receiving the following error message (see below) very time I 
attempt to read the file version of explorer.exe. I have no problems reading 
other file versions for example word.exe or vgx.dll. Could someone please 
provide some insight?

Thanks,
Paul

Error Message:
read_stream_connection_unbuffered: fd=1000001 is closed
read_stream_connection_unbuffered: fd=1000001 is closed
read_stream_connection_unbuffered: fd=1000001 is closed
read_stream_connection_unbuffered: fd=1000001 is closed


Code snippet:

function custom_get_file_version (file)
{

login   =  kb_smb_login();
pass    =  kb_smb_password();
domain  =  kb_smb_domain();

share_list = NetShareEnum ();

foreach s2 (share_list)
{
        if (s2 == "Root$") {
                #display("Found admin share: Root$\n");
                s2 = "ITSCAN$";
        } else if (s2 == "C$") {
                #display("Found admin share: C$\n");
                s2 = "C$";
        }
}

share = s2;

r = NetUseAdd(login:login, password:pass, domain:domain, share:share);

if (r != 1)
{
        NetUseDel();
        exit(1);
}

handle = CreateFile(file:file, desired_access:GENERIC_READ, 
file_attributes:FILE_ATTRIBUTE_NORMAL, share_mode:FILE_SHARE_READ, 
create_disposition:OPEN_EXISTING);

if (!isnull(handle))
{
        ver = GetFileVersion(handle:handle);
        CloseFile(handle:handle);
}
NetUseDel();

if (!isnull(ver))
{
        version = string(ver[0], ".", ver[1], ".", ver[2], ".", ver[3]);
        ret_version = version;
        return ret_version;
}

os_ver = "5.1";

if ( (os_ver == "5.1") || (os_ver == "5.2") ) {
    file_ver = custom_get_file_version(file:"\\windows\\explorer.exe");
}

display ("File version: ",file_ver,"\n"); 

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Mon Nov 13 2006 - 18:23:19 PST