By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with elevated privileges, this can lead to a system compromise on the Metasploit workstation. Note that an attacker would have to lie in wait and entice the Metasploit user to run the affected module against a malicious endpoint in a "hack-back" type of attack. Metasploit is only vulnerable when the drb_remote_codeexec module is running. In most cases, this cannot happen automatically.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Rapid7 |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-5787 | By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with elevated privileges, this can lead to a system compromise on the Metasploit workstation. Note that an attacker would have to lie in wait and entice the Metasploit user to run the affected module against a malicious endpoint in a "hack-back" type of attack. Metasploit is only vulnerable when the drb_remote_codeexec module is running. In most cases, this cannot happen automatically. |
 Github GHSA |
GHSA-xgww-h98f-24qf | Metasploit Framework user exposes Metasploit to same deserialization issue that is exploited by that module |
Fixes
Solution
Do not run the drb_remote_codeexec module. After commit 659137da94fa2fe56ce5c44d611db3692bf7d2e5, the Metasploit Framework no longer ships with the affected module.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: rapid7
Published:
Updated: 2024-09-17T01:30:50.001Z
Reserved: 2020-01-21T00:00:00
Link: CVE-2020-7385
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-04-23T16:15:08.440
Modified: 2024-11-21T05:37:08.730
Link: CVE-2020-7385
Redhat
No data.
OpenCVE Enrichment
No data.