Land #10984, don't examine a nil object in ms15_034_ulonglongadd

GSoC/Meterpreter_Web_Console
Brent Cook 2018-11-20 08:37:48 -06:00
commit bccb0972cf
No known key found for this signature in database
GPG Key ID: 1FFAA0B24B708F96
1 changed files with 3 additions and 3 deletions

View File

@ -151,16 +151,16 @@ class MetasploitModule < Msf::Auxiliary
}
)
vmessage = "#{peer} - Checking #{uri} [#{res.code}]"
vmessage = "#{peer} - Checking #{uri}"
if res && res.body.include?('Requested Range Not Satisfiable')
vprint_status("#{vmessage} - Vulnerable")
vprint_status("#{vmessage} [#{res.code}] - Vulnerable")
target_uri.path = uri # Needed for the DoS attack
return Exploit::CheckCode::Vulnerable
elsif res && res.body.include?('The request has an invalid header name')
vprint_status("#{vmessage} - Safe")
vprint_status("#{vmessage} [#{res.code}] - Safe")
return Exploit::CheckCode::Safe
else