Merge branch 'refs_update' of https://github.com/wchen-r7/metasploit-framework into wchen-r7-refs_update

jvazquez-r7 · jvazquez-r7 · commit fdb457d82bd5 · 2012-12-11T12:16:06.000+01:00
diff --git a/modules/exploits/linux/http/dolibarr_cmd_exec.rb b/modules/exploits/linux/http/dolibarr_cmd_exec.rb
@@ -32,6 +32,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					['OSVDB', '80980'],
 					['URL', 'http://seclists.org/fulldisclosure/2012/Apr/78']
 				],
 			'Arch'            => ARCH_CMD,
diff --git a/modules/exploits/linux/http/webid_converter.rb b/modules/exploits/linux/http/webid_converter.rb
@@ -29,7 +29,8 @@ def initialize(info = {})
 			'References'     =>
 				[
 					[ 'OSVDB', '73609' ],
-					[ 'EDB', '17487' ]
+					[ 'EDB', '17487' ],
+					[ 'URL', 'http://www.webidsupport.com/forums/showthread.php?3892' ]
 				],
 			'Version'        => '$Revision$',
 			'Privileged'     => false,
diff --git a/modules/exploits/multi/http/phptax_exec.rb b/modules/exploits/multi/http/phptax_exec.rb
@@ -31,6 +31,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					['OSVDB', '86992'],
 					['EDB', '21665']
 				],
 			'Payload'        =>
diff --git a/modules/exploits/multi/http/snortreport_exec.rb b/modules/exploits/multi/http/snortreport_exec.rb
@@ -32,7 +32,8 @@ def initialize(info={})
 			'Version'        => '$Revision$',
 			'References'     =>
 				[
-					['OSVDB', '67739']
+					['OSVDB', '67739'],
+					['URL', 'http://www.symmetrixtech.com/articles/news-016.html']
 				],
 			'Payload'        =>
 			{
diff --git a/modules/exploits/unix/misc/qnx_qconn_exec.rb b/modules/exploits/unix/misc/qnx_qconn_exec.rb
@@ -29,9 +29,10 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					['OSVDB', '86672'],
 					['EDB',   '21520'],
 					['URL',   'http://www.fishnetsecurity.com/6labs/blog/pentesting-qnx-neutrino-rtos'],
-					['URL',   'http://www.qnx.com/developers/docs/6.3.0SP3/neutrino/utilities/q/qconn.html'],
+					['URL',   'http://www.qnx.com/developers/docs/6.3.0SP3/neutrino/utilities/q/qconn.html']
 				],
 			'Payload'        =>
 				{
diff --git a/modules/exploits/unix/ssh/tectia_passwd_changereq.rb b/modules/exploits/unix/ssh/tectia_passwd_changereq.rb
@@ -33,6 +33,7 @@ def initialize(info={})
 				[
 					['CVE', '2012-5975'],
 					['EDB', '23082'],
+					['OSVDB', '88103'],
 					['URL', 'http://seclists.org/fulldisclosure/2012/Dec/12'],
 					['URL', 'http://www.ssh.com/index.php/component/content/article/531.html']
 				],
diff --git a/modules/exploits/unix/webapp/basilic_diff_exec.rb b/modules/exploits/unix/webapp/basilic_diff_exec.rb
@@ -29,6 +29,7 @@ def initialize(info = {})
 			'License'        => MSF_LICENSE,
 			'References'     =>
 				[
+					[ 'OSVDB', '83719' ],
 					[ 'BID', '54234' ]
 				],
 			'Platform'       => ['linux', 'unix'],
diff --git a/modules/exploits/unix/webapp/projectpier_upload_exec.rb b/modules/exploits/unix/webapp/projectpier_upload_exec.rb
@@ -34,6 +34,7 @@ def initialize(info={})
 			'References'     =>
 				[
 					['OSVDB', '85881'],
+					['EDB', '21929'],
 					['URL', 'http://packetstormsecurity.org/files/117070/ProjectPier-0.8.8-Shell-Upload.html']
 				],
 			'Platform'       => ['linux', 'php'],
diff --git a/modules/exploits/unix/webapp/xoda_file_upload.rb b/modules/exploits/unix/webapp/xoda_file_upload.rb
@@ -29,6 +29,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					[ 'OSVDB', '85117' ],
 					[ 'BID', '55127' ],
 					[ 'EDB', '20703' ]
 				],
diff --git a/modules/exploits/windows/browser/asus_net4switch_ipswcom.rb b/modules/exploits/windows/browser/asus_net4switch_ipswcom.rb
@@ -29,6 +29,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					[ 'CVE', '2012-4924 ' ],
 					[ 'OSVDB', '79438' ],
 					[ 'URL', 'http://dsecrg.com/pages/vul/show.php?id=417' ]
 				],
diff --git a/modules/exploits/windows/browser/mcafee_mvt_exec.rb b/modules/exploits/windows/browser/mcafee_mvt_exec.rb
@@ -31,7 +31,8 @@ def initialize(info={})
 			'References'     =>
 				[
 					[ 'OSVDB', '81657'],
-					[ 'EDB', '18805' ]
+					[ 'EDB', '18805' ],
+					[ 'URL', 'https://kc.mcafee.com/corporate/index?page=content&id=SB10028' ]
 				],
 			'Payload'        =>
 				{
diff --git a/modules/exploits/windows/browser/ubisoft_uplay_cmd_exec.rb b/modules/exploits/windows/browser/ubisoft_uplay_cmd_exec.rb
@@ -33,8 +33,10 @@ def initialize(info = {})
 				],
 			'References'     =>
 				[
+					[ 'CVE', '2012-4177' ],
 					[ 'OSVDB', '84402'],
-					[ 'URL', 'http://seclists.org/fulldisclosure/2012/Jul/375']
+					[ 'URL', 'http://seclists.org/fulldisclosure/2012/Jul/375'],
+					[ 'URL', 'http://forums.ubi.com/showthread.php/699940-Uplay-PC-Patch-2-0-4-Security-fix' ]
 				],
 			'Platform'       => 'win',
 			'Targets'        =>
diff --git a/modules/exploits/windows/browser/ultramjcam_openfiledig_bof.rb b/modules/exploits/windows/browser/ultramjcam_openfiledig_bof.rb
@@ -31,6 +31,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					[ 'CVE', '2012-4876' ],
 					[ 'OSVDB', '80661' ],
 					[ 'EDB', '18675' ]
 				],
diff --git a/modules/exploits/windows/ftp/absolute_ftp_list_bof.rb b/modules/exploits/windows/ftp/absolute_ftp_list_bof.rb
@@ -26,6 +26,7 @@ def initialize(info = {})
 				],
 			'References'     =>
 				[
+					[ 'CVE', '2011-5164' ],
 					[ 'OSVDB', '77105' ],
 					[ 'EDB', '18102' ]
 				],
diff --git a/modules/exploits/windows/ftp/odin_list_reply.rb b/modules/exploits/windows/ftp/odin_list_reply.rb
@@ -32,7 +32,8 @@ def initialize(info = {})
 			'Version'        => "$Revision$",
 			'References'     =>
 				[
-					[ 'URL', 'http://www.corelan.be:8800/index.php/2010/10/12/death-of-an-ftp-client/' ],
+					[ 'OSVDB', '68824' ],
+					[ 'URL', 'http://www.corelan.be:8800/index.php/2010/10/12/death-of-an-ftp-client/' ]
 				],
 			'DefaultOptions' =>
 				{
diff --git a/modules/exploits/windows/ftp/turboftp_port.rb b/modules/exploits/windows/ftp/turboftp_port.rb
@@ -32,6 +32,7 @@ def initialize(info = {})
 			'Platform'       => [ 'win' ],
 			'References'     =>
 				[
+					[ 'EDB', '22161' ],
 					[ 'OSVDB', '85887' ]
 				],
 			'Payload'        =>
diff --git a/modules/exploits/windows/http/zenworks_uploadservlet.rb b/modules/exploits/windows/http/zenworks_uploadservlet.rb
@@ -36,6 +36,7 @@ def initialize(info = {})
 					[ 'BID', '39114' ],
 					[ 'URL', 'http://www.zerodayinitiative.com/advisories/ZDI-10-078/' ],
 					[ 'URL', 'http://tucanalamigo.blogspot.com/2010/04/pdc-de-zdi-10-078.html' ],
+					[ 'URL', 'http://www.novell.com/support/kb/doc.php?id=7005573' ]
 				],
 			'Privileged'  => true,
 			'Platform'    => [ 'java', 'win', 'linux' ],
diff --git a/modules/exploits/windows/misc/bcaaa_bof.rb b/modules/exploits/windows/misc/bcaaa_bof.rb
@@ -37,9 +37,10 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					[ 'CVE', '2011-5124' ],
 					[ 'OSVDB', '72095'],
 					[ 'URL', 'https://kb.bluecoat.com/index?page=content&id=SA55' ],
-					[ 'URL', 'http://seclists.org/bugtraq/2011/Jul/44' ],
+					[ 'URL', 'http://seclists.org/bugtraq/2011/Jul/44' ]
 				],
 			'Payload'        =>
 				{
diff --git a/modules/exploits/windows/misc/hp_imc_uam.rb b/modules/exploits/windows/misc/hp_imc_uam.rb
@@ -33,7 +33,8 @@ def initialize(info = {})
 				[
 					['OSVDB', '85060'],
 					['BID', '55271'],
-					['URL', 'http://www.zerodayinitiative.com/advisories/ZDI-12-171']
+					['URL', 'http://www.zerodayinitiative.com/advisories/ZDI-12-171'],
+					['URL', 'https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03589863']
 				],
 			'Payload'        =>
 				{
diff --git a/modules/exploits/windows/mysql/mysql_mof.rb b/modules/exploits/windows/mysql/mysql_mof.rb
@@ -34,6 +34,7 @@ def initialize(info = {})
 			'References'     =>
 				[
 					['CVE', '2012-5613'], #DISPUTED
+					['OSVDB', '88118'],
 					['EDB', '23083'],
 					['URL', 'http://seclists.org/fulldisclosure/2012/Dec/13']
 				],
diff --git a/modules/exploits/windows/scada/iconics_genbroker.rb b/modules/exploits/windows/scada/iconics_genbroker.rb
@@ -39,6 +39,7 @@ def initialize(info={})
 				],
 			'References'     =>
 				[
+					['OSVDB', '72817'],
 					['URL', 'http://aluigi.org/adv/genesis_4-adv.txt'],
 					['URL', 'http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-080-02.pdf']
 				],
diff --git a/modules/exploits/windows/scada/sunway_force_control_netdbsrv.rb b/modules/exploits/windows/scada/sunway_force_control_netdbsrv.rb
@@ -30,6 +30,7 @@ def initialize(info = {})
 			'License'        => MSF_LICENSE,
 			'References'     =>
 				[
+					[ 'CVE', '2012-1084' ],
 					[ 'OSVDB', '75798'],
 					[ 'BID', '49747' ],
 					[ 'URL', 'http://aluigi.altervista.org/adv/forcecontrol_1-adv.txt' ],

Original file line number	Diff line number	Diff line change
`@@ -32,6 +32,7 @@ def initialize(info={})`
`32`	`32`	`],`
`33`	`33`	`'References' =>`
`34`	`34`	`[`
	`35`	`+ ['OSVDB', '80980'],`
`35`	`36`	`['URL', 'http://seclists.org/fulldisclosure/2012/Apr/78']`
`36`	`37`	`],`
`37`	`38`	`'Arch' => ARCH_CMD,`
Original file line number	Diff line number	Diff line change
`@@ -31,6 +31,7 @@ def initialize(info={})`
`31`	`31`	`],`
`32`	`32`	`'References' =>`
`33`	`33`	`[`
	`34`	`+ ['OSVDB', '86992'],`
`34`	`35`	`['EDB', '21665']`
`35`	`36`	`],`
`36`	`37`	`'Payload' =>`
Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,8 @@ def initialize(info={})`
`32`	`32`	`'Version' => '$Revision$',`
`33`	`33`	`'References' =>`
`34`	`34`	`[`
`35`		`- ['OSVDB', '67739']`
	`35`	`+ ['OSVDB', '67739'],`
	`36`	`+ ['URL', 'http://www.symmetrixtech.com/articles/news-016.html']`
`36`	`37`	`],`
`37`	`38`	`'Payload' =>`
`38`	`39`	`{`
Original file line number	Diff line number	Diff line change
`@@ -29,9 +29,10 @@ def initialize(info={})`
`29`	`29`	`],`
`30`	`30`	`'References' =>`
`31`	`31`	`[`
	`32`	`+ ['OSVDB', '86672'],`
`32`	`33`	`['EDB', '21520'],`
`33`	`34`	`['URL', 'http://www.fishnetsecurity.com/6labs/blog/pentesting-qnx-neutrino-rtos'],`
`34`		`- ['URL', 'http://www.qnx.com/developers/docs/6.3.0SP3/neutrino/utilities/q/qconn.html'],`
	`35`	`+ ['URL', 'http://www.qnx.com/developers/docs/6.3.0SP3/neutrino/utilities/q/qconn.html']`
`35`	`36`	`],`
`36`	`37`	`'Payload' =>`
`37`	`38`	`{`
Original file line number	Diff line number	Diff line change
`@@ -33,6 +33,7 @@ def initialize(info={})`
`33`	`33`	`[`
`34`	`34`	`['CVE', '2012-5975'],`
`35`	`35`	`['EDB', '23082'],`
	`36`	`+ ['OSVDB', '88103'],`
`36`	`37`	`['URL', 'http://seclists.org/fulldisclosure/2012/Dec/12'],`
`37`	`38`	`['URL', 'http://www.ssh.com/index.php/component/content/article/531.html']`
`38`	`39`	`],`
Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,7 @@ def initialize(info = {})`
`29`	`29`	`'License' => MSF_LICENSE,`
`30`	`30`	`'References' =>`
`31`	`31`	`[`
	`32`	`+ [ 'OSVDB', '83719' ],`
`32`	`33`	`[ 'BID', '54234' ]`
`33`	`34`	`],`
`34`	`35`	`'Platform' => ['linux', 'unix'],`
Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,7 @@ def initialize(info={})`
`34`	`34`	`'References' =>`
`35`	`35`	`[`
`36`	`36`	`['OSVDB', '85881'],`
	`37`	`+ ['EDB', '21929'],`
`37`	`38`	`['URL', 'http://packetstormsecurity.org/files/117070/ProjectPier-0.8.8-Shell-Upload.html']`
`38`	`39`	`],`
`39`	`40`	`'Platform' => ['linux', 'php'],`
Original file line number	Diff line number	Diff line change
`@@ -29,6 +29,7 @@ def initialize(info={})`
`29`	`29`	`],`
`30`	`30`	`'References' =>`
`31`	`31`	`[`
	`32`	`+ [ 'OSVDB', '85117' ],`
`32`	`33`	`[ 'BID', '55127' ],`
`33`	`34`	`[ 'EDB', '20703' ]`
`34`	`35`	`],`