Add exploit for CVE-2014-4872 / domain and SQL creds leakage

This module is an auxiliary for CVE-2014-4872 / CERT VU 121036. BMC Track-It! exposes an unauthenticated .NET remoting service that allows retrieving the domain and SQL database credentials. 
It has been very well tested on all vulnerable versions of Track-It! - version 9 to the latest 11.3.

This is a 0 day exploit as BMC have not responded to CERT and they went ahead with the disclosure. This is a companion module to PR #3965. 

I will add the full disclosure and OSVDB ID's as soon as they become available and the module should be ready to merge.
the name of the database server is not a Realm. The Realm is a part of the authentication context. like the Domain Name if it's a Domain account. In the case of Oracle you have to log into a specific SID which is what Metasploit::Model::Realm::Key::ORACLE_SYSTEM_IDENTIFIER indicates. So you're saying the credential is for a SID but then supply the server name. If it's a domain account you can put a domain and chose the domain key. If it's Oracle you need to put the actual SID there. Otherwise you can leave realm_key and realm_value as nil.