rapid7/metasploit-framework — pull request #4427 by jhart-r7 (2014-12-19 01:23:59+00:00)
Title: Add preliminary module to cover 'Misfortune Cookie', CVE-2014-9222

The details are still largely missing, but we do know from public documentation that this affects RomPager < 4.34.

Validation involves tracking down or building a system that responds to /Allegro with a RomPager-like Server header.

```
msf auxiliary(allegro_rompager_misfortune_cookie) > check
[*] 10.0.1.34:8080 - The target appears to be vulnerable.
[*] Checked 1 of 1 hosts (100% complete)
msf auxiliary(allegro_rompager_misfortune_cookie) > run

[+] 10.0.1.34:8080 appears to be vulnerable
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
```