Skip to content

Commit 1da40b5

Browse files
committed
Change HAVE_POPEN to USE_POPEN
PS target doesn't support it, so the option should be renamed.
1 parent 5b46e72 commit 1da40b5

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

modules/exploits/unix/fileformat/imagemagick_delegate.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -25,8 +25,8 @@ def initialize(info = {})
2525
(discovered by taviso) to achieve RCE in the Ghostscript delegate.
2626
Ghostscript versions 9.18 and later are affected.
2727
28-
If ImageMagick supports popen(), a |-prefixed command will be used for
29-
the exploit. No delegates are involved in this exploitation.
28+
If USE_POPEN is set to true, a |-prefixed command will be used for the
29+
exploit. No delegates are involved in this exploitation.
3030
},
3131
'Author' => [
3232
'stewie', # Vulnerability discovery
@@ -72,7 +72,7 @@ def initialize(info = {})
7272

7373
register_options([
7474
OptString.new('FILENAME', [true, 'Output file', 'msf.png']),
75-
OptBool.new('HAVE_POPEN', [false, 'popen() support', true])
75+
OptBool.new('USE_POPEN', [false, 'Use popen() vector', true])
7676
])
7777
end
7878

@@ -87,7 +87,7 @@ def exploit
8787
end
8888

8989
def template
90-
if datastore['HAVE_POPEN']
90+
if datastore['USE_POPEN']
9191
t = 'popen'
9292
else
9393
t = 'delegate'

0 commit comments

Comments
 (0)