PT-2017-16403 · Rapid7 · Metasploit+1

Publicado 2017-03-02 · Atualizado 2017-03-21 · CVE-2017-5228

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Rapid7 Metasploit versions prior to 4.13.0-2017020701

Description The issue concerns a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. This allows an attacker to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance by using a specially-crafted build of Meterpreter.

Recommendations For versions prior to 4.13.0-2017020701, update to version 4.13.0-2017020701 or later to resolve the issue. As a temporary workaround, consider restricting access to the Dir.download() function until a patch is applied.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-5228

Produtos afetados

Metasploit

Meterpreter

Referências · 4

• http://securityfocus.com/bid/96954 · Nota
• https://osv.dev/vulnerability/CVE-2017-5228 · Aviso do Fabricante
• https://community.rapid7.com/community/infosec/blog/2017/03/01/multiple-vulnerabilities-affecting-four-rapid7-products · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5228 · Nota de Segurança