CVE-2017-5229 | BDVDB-2026-82209 Detail

Description#

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-03-02Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.