escape ticks and spaces in paths

Author: zeroSteiner

lib/msf/core/exploit/mixins.rb

@@ -1,5 +1,5 @@
 # -*- coding: binary -*-
-# $Id: mixins.rb 16142 2012-11-30 19:45:04Z rapid7 $
+# $Id$
 #
 # All exploit mixins should be added to the list below
 #

lib/rex/exploitation/cmdstager/bourne.rb

@@ -21,6 +21,8 @@ def initialize(exe)
 
 	def generate(opts = {})
 		opts[:temp] = opts[:temp] || '/tmp/'
+		opts[:temp] = opts[:temp].gsub(/'/, "\\\\'")
+		opts[:temp] = opts[:temp].gsub(/ /, "\\ ")
 		super
 	end