properly anchor regexes

duh

Author: David Maloney

lib/metasploit/framework/credential_collection.rb

@@ -210,7 +210,7 @@ def each
   def private_type(private)
     if private =~ /[0-9a-f]{32}:[0-9a-f]{32}/
       :ntlm_hash
-    elsif private =~ /md5([a-f0-9]{32})/
+    elsif private =~ /^md5([a-f0-9]{32})$/
       :postgres_md5
     else
       :password

lib/postgres/postgres-pr/connection.rb

@@ -63,7 +63,7 @@ def initialize(database, user, password=nil, uri = nil)
     establish_connection(uri)
 
     # Check if the password supplied is a Postgres-style md5 hash
-    md5_hash_match = password.match(/md5([a-f0-9]{32})/)
+    md5_hash_match = password.match(/^md5([a-f0-9]{32})$/)
 
     @conn << StartupMessage.new(PROTO_VERSION, 'user' => user, 'database' => database).dump