Land #7931, Fix CVE-2017-5231 and respect user's dest

2017-02-07 19:22:17 -06:00 · 2017-02-07 19:22:17 -06:00 · 522c6dce8e
parent db36cf5755 cb74d3b05b
commit 522c6dce8e
1 changed files with 1 additions and 1 deletions
--- a/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb
+++ b/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb
@ -442,7 +442,7 @@ class Console::CommandDispatcher::Stdapi::Fs
          files.each do |file|
            src_separator = client.fs.file.separator
            src_path = file['path'] + client.fs.file.separator + file['name']
-            dest_path = src_path.tr(src_separator, ::File::SEPARATOR)
+            dest_path = ::File.join(dest, ::Rex::FileUtils::clean_path(file['path'].tr(src_separator, ::File::SEPARATOR)))

            client.fs.file.download(dest_path, src_path, opts) do |step, src, dst|
              print_status("#{step.ljust(11)}: #{src} -> #{dst}")