Bson-ERR: Getter for 17 not implemented when running mongodb-info script

[digininja]

Describe the bug

Running the mongodb-info script against a bunch of MongoDB services on a client network I get the following error from every machine:

NSE: [mongodb-info 1.2.3.4:27017] Bson-ERR:Getter for 17 not implemented
NSE: mongodb-info against 1.2.3.4:27017 threw an error!
/usr/bin/../share/nmap/nselib/mongodb.lua:244: table index is nil
stack traceback:
        /usr/bin/../share/nmap/nselib/mongodb.lua:244: in upvalue '_elements_to_dict'
        /usr/bin/../share/nmap/nselib/mongodb.lua:290: in function 'mongodb.fromBson'
        /usr/bin/../share/nmap/nselib/mongodb.lua:586: in function 'mongodb.query'
        /usr/bin/../share/nmap/scripts/mongodb-info.nse:104: in function </usr/bin/../share/nmap/scripts/mongodb-info.nse:70>
        (...tail calls...)

To Reproduce

nmap -p 27017 --script mongodb-info -iL mongodb_ips -oA mongo_info -d      

Expected behavior
No errors.

Version info (please complete the following information):

• OS: [e.g. Linux 4.15, Windows 10 1909]

Kali with all packages updated.

• Output of nmap --version:

Nmap version 7.91 ( https://nmap.org )
Platform: x86_64-pc-linux-gnu
Compiled with: liblua-5.3.3 openssl-1.1.1g libssh2-1.8.0 libz-1.2.11 libpcre-8.39 nmap-libpcap-1.7.3 nmap-libdnet-1.12 ipv6
Compiled without:
Available nsock engines: epoll poll select

I'm on a client box so can't easily build the latest version of nmap from source but could give it a go. Should easily be able to try a new script though.

• Output of nmap --iflist

n/a

Additional context

Internal network, no firewall or limits that I know of on the network itself.

[dmiller-nmap]

Looks like we don't have a fully-functional BSON parser, since it can't handle type 17 (timestamp), and the failure mode is to simply crash. I'll put in a quick fix to avoid crashing, but it might not result in usable output from the scripts until we get parsers for the other types implemented.

[digininja]

I've got till Friday with this client so happy to test anything you can get done by then.

…

On Wed, 10 Nov 2021, 22:54 Daniel Miller, ***@***.***> wrote: Looks like we don't have a fully-functional BSON parser, since it can't handle type 17 (timestamp), and the failure mode is to simply crash. I'll put in a quick fix to avoid crashing, but it might not result in usable output from the scripts until we get parsers for the other types implemented. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#2393 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA4SWJCKEJ3XZE4OTNHZGDULLZZZANCNFSM5HSYYX6A> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.

[King-Del-ErnestO]

Please this hasn't been resolved, i ran into the same error! Please can you help

[nnposter]

The fix was made only after the latest version (7.92) was released, so make sure that you are running the latest code from the SVN or GitHub. If you do, yet you are still experiencing the problem, then you should open a new issue.

[King-Del-ErnestO]

I'm running (7.92) although I noticed the Mongodb.lua file is different from the SVN on the official web,

Please how do I update the library or the SVN?

Thank you so much for your swift response

[nnposter]

Make a backup of directories nselib and scripts and then replace their content with what is available in SVN or GitHub