Add next chunk of fixes

wvu · wvu · commit 25ebb05093f5 · 2014-03-11T12:23:59.000-05:00
Going roughly a third at a time.
diff --git a/modules/exploits/unix/webapp/tikiwiki_unserialize_exec.rb b/modules/exploits/unix/webapp/tikiwiki_unserialize_exec.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Tiki Wiki <= 8.3 unserialize() PHP Code Execution',
+      'Name'           => 'Tiki Wiki unserialize() PHP Code Execution',
       'Description'    => %q{
           This module exploits a php unserialize() vulnerability in Tiki Wiki <= 8.3
         which could be abused to allow unauthenticated users to execute arbitrary code
diff --git a/modules/exploits/windows/brightstor/lgserver.rb b/modules/exploits/windows/brightstor/lgserver.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow',
+      'Name'           => 'CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
         for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could
diff --git a/modules/exploits/windows/brightstor/lgserver_multi.rb b/modules/exploits/windows/brightstor/lgserver_multi.rb
@@ -14,7 +14,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'CA BrightStor ARCserve for Laptops & Desktops LGServer Multiple Commands Buffer Overflow',
+      'Name'           => 'CA BrightStor ARCserve for Laptops and Desktops LGServer Multiple Commands Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
         for Laptops & Desktops 11.1. By sending a specially crafted request to multiple commands,
diff --git a/modules/exploits/windows/brightstor/lgserver_rxrlogin.rb b/modules/exploits/windows/brightstor/lgserver_rxrlogin.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow',
+      'Name'           => 'CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
         for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could
diff --git a/modules/exploits/windows/brightstor/lgserver_rxssetdatagrowthscheduleandfilter.rb b/modules/exploits/windows/brightstor/lgserver_rxssetdatagrowthscheduleandfilter.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'CA BrightStor ARCserve for Laptops & Desktops LGServer (rxsSetDataGrowthScheduleAndFilter) Buffer Overflow',
+      'Name'           => 'CA BrightStor ARCserve for Laptops and Desktops LGServer rxsSetDataGrowthScheduleAndFilter Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
         for Laptops & Desktops 11.1. By sending a specially crafted request (rxsSetDataGrowthScheduleAndFilter),
diff --git a/modules/exploits/windows/brightstor/lgserver_rxsuselicenseini.rb b/modules/exploits/windows/brightstor/lgserver_rxsuselicenseini.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow',
+      'Name'           => 'CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
         for Laptops & Desktops 11.1. By sending a specially crafted request (rxsUseLicenseIni), an
diff --git a/modules/exploits/windows/browser/dxstudio_player_exec.rb b/modules/exploits/windows/browser/dxstudio_player_exec.rb
@@ -14,21 +14,21 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Worldweaver DX Studio Player <= 3.0.29 shell.execute() Command Execution',
+      'Name'           => 'Worldweaver DX Studio Player shell.execute() Command Execution',
       'Description'    => %q{
-          This module exploits a command execution vulnerability within the
-        DX Studio Player from Worldweaver. The player is a browser plugin for
-        IE (ActiveX) and Firefox (dll). When an unsuspecting user visits a web
-        page referring to a specially crafted .dxstudio document, an attacker can
-        execute arbitrary commands.
-
-        Testing was conducted using plugin version 3.0.29.0 for Firefox 2.0.0.20 and
-        IE 6 on Windows XP SP3. In IE, the user will be prompted if they wish to allow
-        the plug-in to access local files. This prompt appears to occur only once per
-        server host.
-
-        NOTE: This exploit uses additionally dangerous script features to write to
-        local files!
+        This module exploits a command execution vulnerability within the DX
+        Studio Player from Worldweaver for versions 3.0.29 and earlier. The
+        player is a browser plugin for IE (ActiveX) and Firefox (dll). When an
+        unsuspecting user visits a web page referring to a specially crafted
+        .dxstudio document, an attacker can execute arbitrary commands.
+
+        Testing was conducted using plugin version 3.0.29.0 for Firefox 2.0.0.20
+        and IE 6 on Windows XP SP3. In IE, the user will be prompted if they
+        wish to allow the plug-in to access local files. This prompt appears to
+        occur only once per server host.
+
+        NOTE: This exploit uses additionally dangerous script features to write
+        to local files!
       },
       'License'        => MSF_LICENSE,
       'Author'         => [ 'jduck' ],
diff --git a/modules/exploits/windows/browser/mozilla_nssvgvalue.rb b/modules/exploits/windows/browser/mozilla_nssvgvalue.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Firefox 7/8 (<= 8.0.1) nsSVGValue Out-of-Bounds Access Vulnerability',
+      'Name'           => 'Firefox nsSVGValue Out-of-Bounds Access Vulnerability',
       'Description'    => %q{
         This module exploits an out-of-bounds access flaw in Firefox 7 and 8 (<= 8.0.1).
         The notification of nsSVGValue observers via nsSVGValue::NotifyObservers(x,y)
diff --git a/modules/exploits/windows/browser/novelliprint_getdriversettings_2.rb b/modules/exploits/windows/browser/novelliprint_getdriversettings_2.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super( update_info(info,
-      'Name'           => 'Novell iPrint Client ActiveX Control <= 5.52 Buffer Overflow',
+      'Name'           => 'Novell iPrint Client ActiveX Control Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell iPrint Client 5.52. When
         sending an overly long string to the GetDriverSettings() property of ienipp.ocx
diff --git a/modules/exploits/windows/browser/teechart_pro.rb b/modules/exploits/windows/browser/teechart_pro.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super( update_info(info,
-      'Name'           => 'TeeChart Professional ActiveX Control <= 2010.0.0.3 Trusted Integer Dereference',
+      'Name'           => 'TeeChart Professional ActiveX Control Trusted Integer Dereference',
       'Description'    => %q{
           This module exploits a integer overflow in TeeChart Pro ActiveX control. When
         sending an overly large/negative integer value to the AddSeries() property of
diff --git a/modules/exploits/windows/fileformat/cain_abel_4918_rdp.rb b/modules/exploits/windows/fileformat/cain_abel_4918_rdp.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Cain & Abel <= v4.9.24 RDP Buffer Overflow',
+      'Name'           => 'Cain and Abel RDP Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in the Cain & Abel v4.9.24
         and below. An attacker must send the file to victim, and the victim must open
diff --git a/modules/exploits/windows/fileformat/esignal_styletemplate_bof.rb b/modules/exploits/windows/fileformat/esignal_styletemplate_bof.rb
@@ -13,13 +13,14 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'eSignal and eSignal Pro <= 10.6.2425.1208 File Parsing Buffer Overflow in QUO',
+      'Name'           => 'eSignal and eSignal Pro File Parsing Buffer Overflow in QUO',
       'Description'    => %q{
-        The software is unable to handle the "<StyleTemplate>" files (even
-        those original included in the program) like those with the registered
-        extensions QUO, SUM and POR. Successful exploitation of this vulnerability
-        may take up to several seconds due to the use of egghunter.  Also, DEP
-        bypass is unlikely due to the limited space for payload.
+        The software is unable to handle the "<StyleTemplate>" files (even those
+        original included in the program) like those with the registered
+        extensions QUO, SUM and POR. Successful exploitation of this
+        vulnerability may take up to several seconds due to the use of
+        egghunter. Also, DEP bypass is unlikely due to the limited space for
+        payload. This vulnerability affects versions 10.6.2425.1208 and earlier.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/fileformat/feeddemon_opml.rb b/modules/exploits/windows/fileformat/feeddemon_opml.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'FeedDemon <= 3.1.0.12 Stack Buffer Overflow',
+      'Name'           => 'FeedDemon Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a buffer overflow in FeedDemon v3.1.0.12. When the application
         is used to import a specially crafted opml file, a buffer overflow occurs allowing
diff --git a/modules/exploits/windows/fileformat/irfanview_jpeg2000_bof.rb b/modules/exploits/windows/fileformat/irfanview_jpeg2000_bof.rb
@@ -13,18 +13,19 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Irfanview JPEG2000 <= v4.3.2.0 jp2 Stack Buffer Overflow',
+      'Name'           => 'Irfanview JPEG2000 jp2 Stack Buffer Overflow',
       'Description'    => %q{
-          This module exploits a stack-based buffer overflow vulnerability in
-        version <= 4.3.2.0 of Irfanview's JPEG2000.dll plugin. This exploit has been
-        tested on a specific version of irfanview (v4.3.2), although other versions may
-        work also. The vulnerability is triggered via parsing an invalid qcd chunk
-        structure and specifying a malformed qcd size and data.
-
-        Payload delivery and vulnerability trigger can be executed in multiple ways.
-        The user can double click the file, use the file dialog, open via the icon
-        and drag/drop the file into Irfanview\'s window. An egg hunter is used for
-        stability.
+        This module exploits a stack-based buffer overflow vulnerability in
+        version <= 4.3.2.0 of Irfanview's JPEG2000.dll plugin. This exploit has
+        been tested on a specific version of irfanview (v4.3.2), although other
+        versions may work also. The vulnerability is triggered via parsing an
+        invalid qcd chunk structure and specifying a malformed qcd size and
+        data.
+
+        Payload delivery and vulnerability trigger can be executed in multiple
+        ways. The user can double click the file, use the file dialog, open via
+        the icon and drag/drop the file into Irfanview's window. An egg hunter
+        is used for stability.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/fileformat/scadaphone_zip.rb b/modules/exploits/windows/fileformat/scadaphone_zip.rb
@@ -15,7 +15,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'ScadaTEC ScadaPhone <= v5.3.11.1230 Stack Buffer Overflow',
+      'Name'           => 'ScadaTEC ScadaPhone Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow vulnerability in
         version 5.3.11.1230 of scadaTEC's ScadaPhone.
diff --git a/modules/exploits/windows/fileformat/videospirit_visprj.rb b/modules/exploits/windows/fileformat/videospirit_visprj.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'VeryTools Video Spirit Pro <= 1.70',
+      'Name'           => 'VeryTools Video Spirit Pro',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Video Spirit <= 1.70.
         When opening a malicious project file (.visprj), a stack buffer overflow occurs,
diff --git a/modules/exploits/windows/fileformat/wireshark_packet_dect.rb b/modules/exploits/windows/fileformat/wireshark_packet_dect.rb
@@ -12,13 +12,13 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow (local)',
+      'Name'           => 'Wireshark packet-dect.c Stack Buffer Overflow (local)',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Wireshark <= 1.4.4
         When opening a malicious .pcap file in Wireshark, a stack buffer occurs,
         resulting in arbitrary code execution.
 
-        Note: To exploit the vulnerability remotely with Scapy: sendp(rdpcap("file"))
+        Note: To exploit the vulnerability remotely with Scapy: sendp(rdpcap("file")).
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb b/modules/exploits/windows/ftp/easyftp_cwd_fixret.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow',
+      'Name'           => 'EasyFTP Server CWD Command Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11
         and earlier. EasyFTP fails to check input size when parsing 'CWD' commands, which
diff --git a/modules/exploits/windows/ftp/easyftp_list_fixret.rb b/modules/exploits/windows/ftp/easyftp_list_fixret.rb
@@ -21,7 +21,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'EasyFTP Server <= 1.7.0.11 LIST Command Stack Buffer Overflow',
+      'Name'           => 'EasyFTP Server LIST Command Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11.
         credit goes to Karn Ganeshan.
diff --git a/modules/exploits/windows/ftp/easyftp_mkd_fixret.rb b/modules/exploits/windows/ftp/easyftp_mkd_fixret.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'EasyFTP Server <= 1.7.0.11 MKD Command Stack Buffer Overflow',
+      'Name'           => 'EasyFTP Server MKD Command Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11
         and earlier. EasyFTP fails to check input size when parsing 'MKD' commands, which
diff --git a/modules/exploits/windows/ftp/scriptftp_list.rb b/modules/exploits/windows/ftp/scriptftp_list.rb
@@ -12,14 +12,16 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'ScriptFTP <= 3.3 Remote Buffer Overflow (LIST)',
+      'Name'           => 'ScriptFTP LIST Remote Buffer Overflow',
       'Description'    => %q{
-          AmmSoft's ScriptFTP client is susceptible to a remote buffer overflow
-        vulnerability that is triggered when processing a sufficiently long filename during
-        a FTP LIST command resulting in overwriting the exception handler. Social engineering
-        of executing a specially crafted ftp file by double click will result in connecting to
-        our malcious server and perform arbitrary code execution which allows the attacker
-        to gain the same rights as the user running ScriptFTP.
+        AmmSoft's ScriptFTP client is susceptible to a remote buffer overflow
+        vulnerability that is triggered when processing a sufficiently long
+        filename during a FTP LIST command resulting in overwriting the
+        exception handler. Social engineering of executing a specially crafted
+        ftp file by double click will result in connecting to our malcious
+        server and perform arbitrary code execution which allows the attacker to
+        gain the same rights as the user running ScriptFTP. This vulnerability
+        affects versions 3.3 and earlier.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/ftp/servu_chmod.rb b/modules/exploits/windows/ftp/servu_chmod.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Serv-U FTP Server < 4.2 Buffer Overflow',
+      'Name'           => 'Serv-U FTP Server Buffer Overflow',
       'Description'    => %q{
         This module exploits a stack buffer overflow in the site chmod command
         in versions of Serv-U FTP Server prior to 4.2.
diff --git a/modules/exploits/windows/http/easyftp_list.rb b/modules/exploits/windows/http/easyftp_list.rb
@@ -14,7 +14,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'EasyFTP Server <= 1.7.0.11 list.html path Stack Buffer Overflow',
+      'Name'           => 'EasyFTP Server list.html path Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11
         and earlier. EasyFTP fails to check input size when parsing the 'path' parameter
diff --git a/modules/exploits/windows/http/ezserver_http.rb b/modules/exploits/windows/http/ezserver_http.rb
@@ -14,11 +14,13 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'EZHomeTech EzServer <= 6.4.017 Stack Buffer Overflow Vulnerability',
+      'Name'           => 'EZHomeTech EzServer Stack Buffer Overflow Vulnerability',
       'Description'    => %q{
-        This module exploits a stack buffer overflow in the EZHomeTech EZServer. If a malicious
-        user sends packets containing an overly long string, it may be possible to execute a
-        payload remotely. Due to size constraints, this module uses the Egghunter technique.
+        This module exploits a stack buffer overflow in the EZHomeTech EZServer
+        for versions 6.4.017 and earlier. If a malicious user sends packets
+        containing an overly long string, it may be possible to execute a
+        payload remotely. Due to size constraints, this module uses the
+        Egghunter technique.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
