PT-2011-2842
CVE-2011-1056
·
تاريخ النشر
2011-02-21
·
تاريخ التحديث
2011-06-20
الوصف من
CVSS 2.0
6.2
متوسطةالمقاييسAV:L/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Metasploit Framework version 3.5.1
Description
The issue concerns the installer for the Metasploit Framework, which, when running on Windows, uses weak inherited permissions for the Metasploit installation directory. This weakness allows local users to gain privileges by replacing critical files with a Trojan horse.
Recommendations
For Metasploit Framework version 3.5.1, consider restricting access to the Metasploit installation directory to prevent local users from replacing critical files until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾