| Package | Affected versions | Patched versions |
|---|---|---|
| metasploit | ≥ 4.12.40, < 6.0.3 | 6.0.3 |
The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free