I cant get that CVE to catch either, i keep hearing steg but no pw even though somethings definately there, ive fuzzed too and its clean mostly. Ive looked for every CVE, Even wrote a few scripts that should have worked. i think im over thinking this one. I also spent hours trying to exploit the R** services to no avail.
(edit: ok i found the box was just always messed up, the timing was an issue i think. did the same thing i tried 100x before and it worked, and i did get it working without MSF for those asking)