Skip to content

Commit 8cf718e

Browse files
committed
Update pureftpd bash module rank and description
1 parent cf6029b commit 8cf718e

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

modules/exploits/multi/ftp/pureftpd_bash_env_exec.rb

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@
55

66
require 'msf/core'
77

8-
class Metasploit3 < Msf::Exploit::Remote
9-
Rank = GoodRanking
8+
class Metasploit4 < Msf::Exploit::Remote
9+
Rank = ExcellentRanking
1010

1111
include Msf::Exploit::Remote::Ftp
1212
include Msf::Exploit::CmdStager
@@ -15,9 +15,10 @@ def initialize(info = {})
1515
super(update_info(info,
1616
'Name' => 'Pure-FTPd External Authentication Bash Environment Variable Code Injection',
1717
'Description' => %q(
18-
This module exploits a code injection in specially crafted environment
19-
variables in Bash, specifically targeting Pure-FTPd when configured to
20-
use an external program for authentication.
18+
This module exploits the code injection flaw known as shellshock which
19+
leverages specially crafted environment variables in Bash. This exploit
20+
specifically targets Pure-FTPd when configured to use an external
21+
program for authentication.
2122
),
2223
'Author' =>
2324
[
@@ -54,6 +55,10 @@ def initialize(info = {})
5455
}
5556
]
5657
],
58+
'DefaultOptions' =>
59+
{
60+
'PrependFork' => true
61+
},
5762
'DefaultTarget' => 0,
5863
'DisclosureDate' => 'Sep 24 2014'))
5964
register_options(

0 commit comments

Comments
 (0)