Add last chunk of fixes

wvu · wvu · commit 517f26400053 · 2014-03-11T12:46:44.000-05:00
diff --git a/modules/exploits/windows/http/icecast_header.rb b/modules/exploits/windows/http/icecast_header.rb
@@ -12,23 +12,20 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Icecast (<= 2.0.1) Header Overwrite (win32)',
+      'Name'           => 'Icecast Header Overwrite',
       'Description'    => %q{
-          This module exploits a buffer overflow in the header parsing
-        of icecast, discovered by Luigi Auriemma.  Sending 32 HTTP
-        headers will cause a write one past the end of a pointer
-        array.  On win32 this happens to overwrite the saved
-        instruction pointer, and on linux (depending on compiler,
-        etc) this seems to generally overwrite nothing crucial (read
-        not exploitable).
-
-        !! This exploit uses ExitThread(), this will leave icecast
-        thinking the thread is still in use, and the thread counter
-        won't be decremented.  This means for each time your payload
-        exits, the counter will be left incremented, and eventually
-        the threadpool limit will be maxed.  So you can multihit,
-        but only till you fill the threadpool.
+        This module exploits a buffer overflow in the header parsing of icecast
+        versions 2.0.1 and earlier, discovered by Luigi Auriemma. Sending 32
+        HTTP headers will cause a write one past the end of a pointer array. On
+        win32 this happens to overwrite the saved instruction pointer, and on
+        linux (depending on compiler, etc) this seems to generally overwrite
+        nothing crucial (read not exploitable).
 
+        This exploit uses ExitThread(), this will leave icecast thinking the
+        thread is still in use, and the thread counter won't be decremented.
+        This means for each time your payload exits, the counter will be left
+        incremented, and eventually the threadpool limit will be maxed. So you
+        can multihit, but only till you fill the threadpool.
       },
       'Author'         => [ 'spoonm', 'Luigi Auriemma <aluigi[at]autistici.org>' ],
       'License'        => MSF_LICENSE,
diff --git a/modules/exploits/windows/http/kolibri_http.rb b/modules/exploits/windows/http/kolibri_http.rb
@@ -15,8 +15,10 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Kolibri <= v2.0 HTTP Server HEAD Buffer Overflow',
-      'Description'    => %q{This exploits a stack buffer overflow in version 2 of the Kolibri HTTP server.},
+      'Name'           => 'Kolibri HTTP Server HEAD Buffer Overflow',
+      'Description'    => %q{
+        This exploits a stack buffer overflow in version 2 of the Kolibri HTTP server.
+      },
       'Author'         =>
           [
             'mr_me <steventhomasseeley[at]gmail.com>', # msf
diff --git a/modules/exploits/windows/http/mdaemon_worldclient_form2raw.rb b/modules/exploits/windows/http/mdaemon_worldclient_form2raw.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'		=> 'MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Buffer Overflow',
+      'Name'		=> 'MDaemon WorldClient form2raw.cgi Stack Buffer Overflow',
       'Description'	=> %q{
       This module exploits a stack buffer overflow in Alt-N MDaemon SMTP server for
       versions 6.8.5 and earlier. When WorldClient HTTP server is installed (default),
diff --git a/modules/exploits/windows/http/peercast_url.rb b/modules/exploits/windows/http/peercast_url.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'PeerCast <= 0.1216 URL Handling Buffer Overflow (win32)',
+      'Name'           => 'PeerCast URL Handling Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in PeerCast <= v0.1216.
         The vulnerability is caused due to a boundary error within the
diff --git a/modules/exploits/windows/http/shttpd_post.rb b/modules/exploits/windows/http/shttpd_post.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)',
+      'Name'           => 'SHTTPD URI-Encoded POST Request Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in SHTTPD <= 1.34.
         The vulnerability is caused due to a boundary error within the
diff --git a/modules/exploits/windows/http/steamcast_useragent.rb b/modules/exploits/windows/http/steamcast_useragent.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Streamcast <= 0.9.75 HTTP User-Agent Buffer Overflow',
+      'Name'           => 'Streamcast HTTP User-Agent Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Streamcast <= 0.9.75. By sending
           an overly long User-Agent in an HTTP GET request, an attacker may be able to
diff --git a/modules/exploits/windows/imap/mercury_login.rb b/modules/exploits/windows/imap/mercury_login.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Mercury/32 <= 4.01b LOGIN Buffer Overflow',
+      'Name'           => 'Mercury/32 LOGIN Buffer Overflow',
       'Description'    => %q{
         This module exploits a stack buffer overflow in Mercury/32 <= 4.01b IMAPD
         LOGIN verb. By sending a specially crafted login command, a buffer
diff --git a/modules/exploits/windows/imap/novell_netmail_append.rb b/modules/exploits/windows/imap/novell_netmail_append.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Novell NetMail <= 3.52d IMAP APPEND Buffer Overflow',
+      'Name'           => 'Novell NetMail IMAP APPEND Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell's Netmail 3.52 IMAP APPEND
         verb. By sending an overly long string, an attacker can overwrite the
diff --git a/modules/exploits/windows/imap/novell_netmail_auth.rb b/modules/exploits/windows/imap/novell_netmail_auth.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Novell NetMail <=3.52d IMAP AUTHENTICATE Buffer Overflow',
+      'Name'           => 'Novell NetMail IMAP AUTHENTICATE Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell's NetMail 3.52 IMAP AUTHENTICATE
         GSSAPI command. By sending an overly long string, an attacker can overwrite the
diff --git a/modules/exploits/windows/imap/novell_netmail_status.rb b/modules/exploits/windows/imap/novell_netmail_status.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Novell NetMail <= 3.52d IMAP STATUS Buffer Overflow',
+      'Name'           => 'Novell NetMail IMAP STATUS Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell's Netmail 3.52 IMAP STATUS
         verb. By sending an overly long string, an attacker can overwrite the
diff --git a/modules/exploits/windows/imap/novell_netmail_subscribe.rb b/modules/exploits/windows/imap/novell_netmail_subscribe.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Novell NetMail <= 3.52d IMAP SUBSCRIBE Buffer Overflow',
+      'Name'           => 'Novell NetMail IMAP SUBSCRIBE Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell's NetMail 3.52 IMAP SUBSCRIBE
         verb. By sending an overly long string, an attacker can overwrite the
diff --git a/modules/exploits/windows/lpd/wincomlpd_admin.rb b/modules/exploits/windows/lpd/wincomlpd_admin.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'WinComLPD <= 3.0.2 Buffer Overflow',
+      'Name'           => 'WinComLPD Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in WinComLPD <= 3.0.2.
         By sending an overly long authentication packet to the remote
diff --git a/modules/exploits/windows/misc/mercury_phonebook.rb b/modules/exploits/windows/misc/mercury_phonebook.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Mercury/32 <= v4.01b PH Server Module Buffer Overflow',
+      'Name'           => 'Mercury/32 PH Server Module Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack-based buffer overflow in
         Mercury/32 <= v4.01b PH Server Module. This issue is
diff --git a/modules/exploits/windows/misc/mirc_privmsg_server.rb b/modules/exploits/windows/misc/mirc_privmsg_server.rb
@@ -11,7 +11,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'mIRC <= 6.34 PRIVMSG Handling Stack Buffer Overflow',
+      'Name'           => 'mIRC PRIVMSG Handling Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a buffer overflow in the mIRC IRC Client v6.34 and earlier.
         By enticing a mIRC user to connect to this server module, an excessively long PRIVMSG
diff --git a/modules/exploits/windows/misc/poisonivy_bof.rb b/modules/exploits/windows/misc/poisonivy_bof.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => "Poison Ivy 2.3.2 C&C Server Buffer Overflow",
+      'Name'           => "Poison Ivy Server Buffer Overflow",
       'Description'    => %q{
         This module exploits a stack buffer overflow in Poison Ivy 2.3.2 C&C server.
         The exploit does not need to know the password chosen for the bot/server
diff --git a/modules/exploits/windows/misc/trendmicro_cmdprocessor_addtask.rb b/modules/exploits/windows/misc/trendmicro_cmdprocessor_addtask.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info={})
     super(update_info(info,
-      'Name'           => "TrendMicro Control Manger <= v5.5 CmdProcessor.exe Stack Buffer Overflow",
+      'Name'           => "TrendMicro Control Manger CmdProcessor.exe Stack Buffer Overflow",
       'Description'    => %q{
           This module exploits a vulnerability in the CmdProcessor.exe component of Trend
         Micro Control Manger up to version 5.5.
diff --git a/modules/exploits/windows/misc/wireshark_packet_dect.rb b/modules/exploits/windows/misc/wireshark_packet_dect.rb
@@ -12,10 +12,10 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow (remote)',
+      'Name'           => 'Wireshark packet-dect.c Stack Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Wireshark <= 1.4.4
-        by sending an malicious packet.)
+        by sending an malicious packet.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/novell/nmap_stor.rb b/modules/exploits/windows/novell/nmap_stor.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Novell NetMail <= 3.52d NMAP STOR Buffer Overflow',
+      'Name'           => 'Novell NetMail NMAP STOR Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in Novell's Netmail 3.52 NMAP STOR
         verb. By sending an overly long string, an attacker can overwrite the
diff --git a/modules/exploits/windows/proxy/ccproxy_telnet_ping.rb b/modules/exploits/windows/proxy/ccproxy_telnet_ping.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'		=> 'CCProxy <= v6.2 Telnet Proxy Ping Overflow',
+      'Name'		=> 'CCProxy Telnet Proxy Ping Overflow',
       'Description'	=> %q{
           This module exploits the YoungZSoft CCProxy <= v6.2 suite
         Telnet service. The stack is overwritten when sending an overly
diff --git a/modules/exploits/windows/scada/codesys_web_server.rb b/modules/exploits/windows/scada/codesys_web_server.rb
@@ -12,10 +12,12 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'            => 'SCADA 3S CoDeSys CmpWebServer <= v3.4 SP4 Patch 2 Stack Buffer Overflow',
+      'Name'            => 'SCADA 3S CoDeSys CmpWebServer Stack Buffer Overflow',
       'Description'     => %q{
         This module exploits a remote stack buffer overflow vulnerability in
-        3S-Smart Software Solutions product CoDeSys Scada Web Server Version 1.1.9.9.
+        3S-Smart Software Solutions product CoDeSys Scada Web Server Version
+        1.1.9.9. This vulnerability affects versions 3.4 SP4 Patch 2 and
+        earlier.
       },
       'License'         => MSF_LICENSE,
       'Author'          =>
diff --git a/modules/exploits/windows/scada/igss9_igssdataserver_listall.rb b/modules/exploits/windows/scada/igss9_igssdataserver_listall.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info={})
     super(update_info(info,
-      'Name'           => "7-Technologies IGSS <= v9.00.00 b11063 IGSSdataServer.exe Stack Buffer Overflow",
+      'Name'           => "7-Technologies IGSS IGSSdataServer.exe Stack Buffer Overflow",
       'Description'    => %q{
           This module exploits a vulnerability in the igssdataserver.exe component of 7-Technologies
         IGSS up to version 9.00.00 b11063. While processing a ListAll command, the application
diff --git a/modules/exploits/windows/scada/procyon_core_server.rb b/modules/exploits/windows/scada/procyon_core_server.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info={})
     super(update_info(info,
-      'Name'           => "Procyon Core Server HMI <= v1.13 Coreservice.exe Stack Buffer Overflow",
+      'Name'           => "Procyon Core Server HMI Coreservice.exe Stack Buffer Overflow",
       'Description'    => %q{
           This module exploits a vulnerability in the coreservice.exe component of Proycon
         Core Server <= v1.13. While processing a password, the application
diff --git a/modules/exploits/windows/scada/scadapro_cmdexe.rb b/modules/exploits/windows/scada/scadapro_cmdexe.rb
@@ -14,12 +14,13 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Measuresoft ScadaPro <= 4.0.0 Remote Command Execution',
+      'Name'           => 'Measuresoft ScadaPro Remote Command Execution',
       'Description'    => %q{
-          This module allows remote attackers to execute arbitray commands on
-        the affected system by abusing via Directory Traversal attack when using the 'xf'
-        command (execute function). An attacker can execute system() from msvcrt.dll to
-        upload a backdoor and gain remote code execution.
+        This module allows remote attackers to execute arbitray commands on the
+        affected system by abusing via Directory Traversal attack when using the
+        'xf' command (execute function). An attacker can execute system() from
+        msvcrt.dll to upload a backdoor and gain remote code execution. This
+        vulnerability affects version 4.0.0 and earlier.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>
diff --git a/modules/exploits/windows/smb/timbuktu_plughntcommand_bof.rb b/modules/exploits/windows/smb/timbuktu_plughntcommand_bof.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'Timbuktu <= 8.6.6 PlughNTCommand Named Pipe Buffer Overflow',
+      'Name'           => 'Timbuktu PlughNTCommand Named Pipe Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack based buffer overflow in Timbuktu Pro version <= 8.6.6
         in a pretty novel way.
diff --git a/modules/exploits/windows/ssh/putty_msg_debug.rb b/modules/exploits/windows/ssh/putty_msg_debug.rb
@@ -10,10 +10,11 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'PuTTy.exe <= v0.53 Buffer Overflow',
+      'Name'           => 'PuTTY Buffer Overflow',
       'Description'    => %q{
-          This module exploits a buffer overflow in the PuTTY SSH client that is triggered
-        through a validation error in SSH.c.
+        This module exploits a buffer overflow in the PuTTY SSH client that is
+        triggered through a validation error in SSH.c. This vulnerability
+        affects versions 0.53 and earlier.
       },
       'Author'         => 'MC',
       'License'        => MSF_LICENSE,
diff --git a/modules/exploits/windows/ssh/securecrt_ssh1.rb b/modules/exploits/windows/ssh/securecrt_ssh1.rb
@@ -10,7 +10,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflow',
+      'Name'           => 'SecureCRT SSH1 Buffer Overflow',
       'Description'    => %q{
           This module exploits a buffer overflow in SecureCRT <= 4.0
         Beta 2. By sending a vulnerable client an overly long
diff --git a/modules/exploits/windows/telnet/goodtech_telnet.rb b/modules/exploits/windows/telnet/goodtech_telnet.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'GoodTech Telnet Server <= 5.0.6 Buffer Overflow',
+      'Name'           => 'GoodTech Telnet Server Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in GoodTech Systems Telnet Server
         versions prior to 5.0.7. By sending an overly long string, an attacker can
diff --git a/modules/exploits/windows/tftp/tftpd32_long_filename.rb b/modules/exploits/windows/tftp/tftpd32_long_filename.rb
@@ -12,7 +12,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'           => 'TFTPD32 <= 2.21 Long Filename Buffer Overflow',
+      'Name'           => 'TFTPD32 Long Filename Buffer Overflow',
       'Description'    => %q{
           This module exploits a stack buffer overflow in TFTPD32 version 2.21
         and prior. By sending a request for an overly long file name
diff --git a/modules/exploits/windows/vnc/winvnc_http_get.rb b/modules/exploits/windows/vnc/winvnc_http_get.rb
@@ -13,7 +13,7 @@ class Metasploit3 < Msf::Exploit::Remote
 
   def initialize(info = {})
     super(update_info(info,
-      'Name'		=> 'WinVNC Web Server <= v3.3.3r7 GET Overflow',
+      'Name'		=> 'WinVNC Web Server GET Overflow',
       'Description'	=> %q{
         This module exploits a buffer overflow in the AT&T WinVNC version
         <= v3.3.3r7 web server. When debugging mode with logging is
