Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged mode), allows attackers to modify temporary environment variables before the "_Defanged" environment option is checked when processing the Exploit command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Metasploit Framework MSFWeb Defanged模式限制绕过漏洞
Vulnerability Description
当以-D选项(defanged模式)运行时，Metasploit Framework 2.4及早期版本中的msfweb的StateToOptions函数允许攻击者在检查"_Defanged" 环境选项(处理Exploit命令时)之前修改临时环境变量。
CVSS Information
N/A
Vulnerability Type
N/A