CVE-2011-1056 | BDVDB-2026-45217 Detail

Description#

The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/70857
http://www.vupen.com/english/advisories/2011/0371
http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html
http://secunia.com/advisories/43166

Exploit#

No public exploit known

History#

Version 12011-02-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.