{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-02-11T00:00:00", "descriptions": [{"lang": "en", "value": "The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-03-11T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "70857", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/70857"}, {"name": "ADV-2011-0371", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/0371"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html"}, {"name": "43166", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/43166"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-1056", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "70857", "refsource": "OSVDB", "url": "http://osvdb.org/70857"}, {"name": "ADV-2011-0371", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/0371"}, {"name": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html", "refsource": "CONFIRM", "url": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html"}, {"name": "43166", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/43166"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:14:27.242Z"}, "title": "CVE Program Container", "references": [{"name": "70857", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/70857"}, {"name": "ADV-2011-0371", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/0371"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html"}, {"name": "43166", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/43166"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-1056", "datePublished": "2011-02-21T20:00:00", "dateReserved": "2011-02-21T00:00:00", "dateUpdated": "2024-08-06T22:14:27.242Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:metasploit:metasploit_framework:3.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "C1D5B5D1-4A4D-46B8-A65E-5903BA2C6875", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse."}, {"lang": "es", "value": "El instalador de Metasploit Framework versi\u00f3n 3.5.1, cuando es ejecutado en Windows, usa permisos heredados d\u00e9biles para el directorio installation de Metasploit, que permite a los usuarios locales obtener privilegios al reemplazar archivos cr\u00edticos con unos de tipo caballo de Troya."}], "id": "CVE-2011-1056", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 1.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-02-21T21:00:00.833", "references": [{"source": "cve@mitre.org", "url": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/70857"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43166"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0371"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/70857"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43166"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0371"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}