MetaSploit Framework Inherited Permission File Overwrite Local Privilege Escalation Vulnerability

Bugtraq ID:	46300
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Feb 09 2011 12:00AM
Updated:	Feb 09 2011 12:00AM
Credit:	Eduardo Prado of Secumania
Vulnerable:	Metasploit Project Metasploit Framework 3.5.1 Metasploit Project Metasploit Framework 3.5 Metasploit Project Metasploit Framework 3.4 Metasploit Project Metasploit Framework 3.3 Metasploit Project Metasploit Framework 2.4 Metasploit Project Metasploit Framework 2.3 Metasploit Project Metasploit Framework 2.2 Metasploit Project Metasploit Framework 2.1 Metasploit Project Metasploit Framework 2.0 Metasploit Project Metasploit Framework 1.0 Metasploit Project Metasploit Framework 3.1 Metasploit Project Metasploit Framework 3.0
Not Vulnerable:	Metasploit Project Metasploit Framework 3.5.2

MetaSploit Framework Inherited Permission File Overwrite Local Privilege Escalation Vulnerability

Metasploit Framework is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to overwrite arbitrary files in the Metasploit directory. Successful exploits may allow attackers to execute arbitrary code with elevated privileges.

Versions Prior to Metasploit Framework 3.5.2 are vulnerable.

MetaSploit Framework Inherited Permission File Overwrite Local Privilege Escalation Vulnerability

To exploit this issue, attackers require local, interactive access to an affected computer.

MetaSploit Framework Inherited Permission File Overwrite Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

MetaSploit Framework Inherited Permission File Overwrite Local Privilege Escalation Vulnerability

References:

• Metasploit Framework 3.5.2 Released (Metasploit Project)
  
• Metasploit Framework Homepage (Metasploit Framework)