rapid7/metasploit-framework — pull request #3966 by pedrib (2014-10-07 22:56:44+00:00)
Title: Trackit creds

This module is an auxiliary for CVE-2014-4872 / CERT VU 121036. BMC Track-It! exposes an unauthenticated .NET remoting service that allows retrieving the domain and SQL database credentials.
It has been very well tested on all vulnerable versions of Track-It! - version 9 to the latest 11.3.

This is a 0 day exploit as BMC have not responded to CERT and they went ahead with the disclosure. This is a companion module to PR #3965.

I will add the full disclosure and OSVDB ID's as soon as they become available and the module should be ready to merge.