Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module

The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP server.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

相对路径遍历

Metasploit Framework module 路径遍历漏洞

Rapid7 Metasploit Framework是美国Rapid7公司的一款渗透测试框架。 Metasploit Framework module中的 "telpho10_credential_dump" 存在路径遍历漏洞，攻击者可以将任意文件写入运行该模块相关系统上的任意位置。

N/A

N/A