Add exploit for CVE-2014-4872 / domain and SQL creds leakage

This module is an auxiliary for CVE-2014-4872 / CERT VU 121036. BMC Track-It! exposes an unauthenticated .NET remoting service that allows retrieving the domain and SQL database credentials. 
It has been very well tested on all vulnerable versions of Track-It! - version 9 to the latest 11.3.

This is a 0 day exploit as BMC have not responded to CERT and they went ahead with the disclosure. This is a companion module to PR #3965. 

I will add the full disclosure and OSVDB ID's as soon as they become available and the module should be ready to merge.
I'm not sure if I'm not understanding what you are saying or if you are not understanding the algorithm.
We are filling the values as they come from the packets, and there might be empty values. If we find one, store it as an empty string to know that we don't need to look for it in subsequent requests.