parent
81bca2c45a
commit
08ba2c70d3
|
@ -14,9 +14,11 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
|
|
||||||
def initialize(info={})
|
def initialize(info={})
|
||||||
super(update_info(info,
|
super(update_info(info,
|
||||||
'Name' => 'MongoDB nativeHelper.apply Instruction Pointer Control',
|
'Name' => 'MongoDB nativeHelper.apply Remote Code Execution',
|
||||||
'Description' => %q{
|
'Description' => %q{
|
||||||
This module exploit a feature in spiderMonkey to control Instruction Pointer.
|
This module exploit a the nativeHelper feature from spiderMonkey which allows to
|
||||||
|
to control execution by calling it wit specially crafted arguments. This module
|
||||||
|
has been tested successfully on MongoDB 2.2.3 on Ubuntu 10.04 and Debian Squeeze.
|
||||||
},
|
},
|
||||||
'Author' =>
|
'Author' =>
|
||||||
[
|
[
|
||||||
|
|
Loading…
Reference in New Issue