Give proper credit to Craig plus additional references

Craig first found the buffer overflow. But Matt found a more reliable way to exploit the flaw.
2012-08-21 22:48:15 -05:00 · 2012-08-21 22:48:15 -05:00 · 1b6fe22359
parent 39430cbdbd
commit 1b6fe22359
1 changed files with 6 additions and 2 deletions
--- a/modules/exploits/windows/http/sysax_create_folder.rb
+++ b/modules/exploits/windows/http/sysax_create_folder.rb
@ -28,12 +28,16 @@ class Metasploit3 < Msf::Exploit::Remote
 			'License'	=> MSF_LICENSE,
 			'Author'	=>
 				[
-					'Matt "hostess" Andreko',
+					'Craig Freyman',         #Original discovery for the overflow
+					'Matt "hostess" Andreko' #More reliable attack vector
 				],
 			'References'	=>
 				[
+					[ 'OSVDB', '82329' ],
 					[ 'EDB', '20676' ],
-					[ 'URL', 'http://www.mattandreko.com/2012/07/sysax-564-http-remote-buffer-overflow.html' ],
+					[ 'EDB', '18420' ],
+					[ 'URL', 'http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html' ],
+					[ 'URL', 'http://www.mattandreko.com/2012/07/sysax-564-http-remote-buffer-overflow.html' ]
 				],
 			'DefaultOptions' =>
 				{