Skip to content

Commit

Permalink
Land #2522, @todb-r7's pre-release module fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
wvu committed Oct 14, 2013
2 parents 29ae6be + 63e40f9 commit 31dc7c0
Show file tree
Hide file tree
Showing 5 changed files with 7 additions and 7 deletions.
Expand Up @@ -20,7 +20,7 @@ def initialize
'Name' => 'SAP Host Agent Information Disclosure',
'Description' => %q{
This module attempts to retrieve Computer and OS info from Host Agent
through the SAP HostControl service
through the SAP HostControl service.
},
'References' =>
[
Expand Down
4 changes: 2 additions & 2 deletions modules/exploits/linux/http/linksys_wrt110_cmd_exec.rb
Expand Up @@ -70,14 +70,14 @@ def check
end

def exploit
test_login!
test_login

execute_cmdstager
end

# Sends an HTTP request with authorization header to the router
# Raises an exception unless the login is successful
def test_login!
def test_login
print_status("#{rhost}:#{rport} - Trying to login with #{user}:#{pass}")

res = send_auth_request_cgi({
Expand Down
4 changes: 2 additions & 2 deletions modules/exploits/windows/browser/ms13_080_cdisplaypointer.rb
Expand Up @@ -33,11 +33,11 @@ def initialize(info={})
multiple research companies and the vendor until the October patch release.
This issue is a use-after-free vulnerability in CDisplayPointer via the use of a
"onpropertychange" event handler. To setup the appropriate buggy conditions, we first craft
"onpropertychange" event handler. To set up the appropriate buggy conditions, we first craft
the DOM tree in a specific order, where a CBlockElement comes after the CTextArea element.
If we use a select() function for the CTextArea element, two important things will happen:
a CDisplayPointer object will be created for CTextArea, and it will also trigger another
event called "onselect". The "onselect" event will allow us to setup for the actual event
event called "onselect". The "onselect" event will allow us to set up for the actual event
handler we want to abuse - the "onpropertychange" event. Since the CBlockElement is a child
of CTextArea, if we do a node swap of CBlockElement in "onselect", this will trigger
"onpropertychange". During "onpropertychange" event handling, a free of the CDisplayPointer
Expand Down
2 changes: 1 addition & 1 deletion modules/exploits/windows/misc/hp_dataprotector_crs.rb
Expand Up @@ -20,7 +20,7 @@ def initialize(info = {})
'Name' => 'HP Data Protector Cell Request Service Buffer Overflow',
'Description' => %q{
This module exploits a stack-based buffer overflow in the Hewlett-Packard Data Protector
product. The vulnerability, due to the insecure usage of _swprintf, exist at the Cell
product. The vulnerability, due to the insecure usage of _swprintf, exists at the Cell
Request Service (crs.exe) when parsing packets with opcode 211. This module has been tested
successfully on HP Data Protector 6.20 and 7.00 on Windows XP SP3.
},
Expand Down
2 changes: 1 addition & 1 deletion modules/post/multi/gather/resolve_hosts.rb
Expand Up @@ -12,7 +12,7 @@ class Metasploit3 < Msf::Post

def initialize(info={})
super( update_info( info,
'Name' => 'Resolve Hosts',
'Name' => 'Multi Gather Resolve Hosts',
'Description' => %q{
Resolves hostnames to either IPv4 or IPv6 addresses from the perspective of the remote host.
},
Expand Down

0 comments on commit 31dc7c0

Please sign in to comment.