CVE-2017-5229
HighSummary
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Risk Assessment
This vulnerability may lead to unauthorized access to the file system, posing a risk of data leakage or file modification by an attacker.
Recommendation
It is recommended to upgrade to Metasploit version 4.13.0-2017020701 or later to mitigate this vulnerability.
Other vulnerabilities in Rapid7 Metasploit
See all- CVE-2017-5231High
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
- CVE-2017-5228High
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
- CVE-2019-5645High
A vulnerability in Rapid7 Metasploit allows an attacker to register an arbitrary regular expression by sending a specially crafted HTTP GET request to a listening Metasploit HTTP handler. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established or cause resource exhaustion on the Metasploit server.
Original NVD description (English source)
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS