rapid7/metasploit-framework — pull request #487 by jvazquez-r7 (2012-06-14 22:35:52+00:00)
Title: Added module plus encoder for CVE-2012-2329

Added module for CVE-2012-2329 PHP CGI apache_request_headers Buffer Overflow.

Tested with PHP-5.4.2 (thread safe version) from windows.php.net and Apache 2.2.22 from Apache Lounge (http://www.apachelounge.com/).

Still no DEP bypass available. Searching for a reliable stackpivot.

This module has needed his own encoder because of the specific badchar "0x5f" (underscore) which makes it incompatible with the available "avoid tolower" encoders in msf.