MetaSploit Framework 'pcap_log' Plugin Local Privilege Escalation Vulnerability

Bugtraq ID:	54472
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 16 2012 12:00AM
Updated:	Oct 12 2012 05:10PM
Credit:	0a29406d9794e4f9b30b3c5d6702c708
Vulnerable:	Metasploit Project Metasploit Framework 3.5.2 Metasploit Project Metasploit Framework 3.5.1 Metasploit Project Metasploit Framework 3.5 Metasploit Project Metasploit Framework 3.4 Metasploit Project Metasploit Framework 3.3 Metasploit Project Metasploit Framework 2.4 Metasploit Project Metasploit Framework 2.3 Metasploit Project Metasploit Framework 2.2 Metasploit Project Metasploit Framework 2.1 Metasploit Project Metasploit Framework 2.0 Metasploit Project Metasploit Framework 1.0 Metasploit Project Metasploit Framework 4.1.0 Metasploit Project Metasploit Framework 3.1 Metasploit Project Metasploit Framework 3.0
Not Vulnerable:

MetaSploit Framework 'pcap_log' Plugin Local Privilege Escalation Vulnerability

Metasploit Framework is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to overwrite arbitrary files in the Metasploit directory. Successful exploits may allow attackers to execute arbitrary code with elevated privileges.

MetaSploit Framework 'pcap_log' Plugin Local Privilege Escalation Vulnerability

The following exploit codes are available:

• /data/vulnerabilities/exploits/54472.rb
• /data/vulnerabilities/exploits/54472_1.rb

MetaSploit Framework 'pcap_log' Plugin Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

MetaSploit Framework 'pcap_log' Plugin Local Privilege Escalation Vulnerability

References:

• Metasploit Framework Homepage (Metasploit Framework)