CVE-2011-1056 The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replaci...
MediumCVSS 6.2
EPSS 0.28%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metasploit framework | = 3.5.1 | No fix listed |
References
- blog.metasploit.com
- 70857 vdb-entry
- 43166 third-party-advisory vendor-advisory
- ADV-2011-0371 vdb-entry vendor-advisory