rapid7/metasploit-framework — pull request #321 by juanvazquez (2012-04-09 18:53:05+00:00)
Title: added module for CVE-2012-0198

I would like to make a contribution to metasploit with a module for "CVE-2012-0198: IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploadFile() Method Boundary Error Remote Overflow" with the hope you find it useful.

I've tested, with windows/meterpreter/reverse_tcp, on Windows XP SP3:
* ie6
* ie7
* ie8 (DEP bypass via JRE msvcr71.dll)

I would like to add support for other OSes, probably along the week. Let me know if you prefer to wait for other OSes before thinking in commit :)

Finally I'm learning and training exploit writing and metasploit dev so any feedback about the code is welcome!

Regards,

juan