CVE-2011-1056

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-21 · updated 2026-06-16
Weakness: CWE-264

Description

The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.

Affected products

Metasploit Framework: 3.5.1

References

http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html
http://osvdb.org/70857
http://secunia.com/advisories/43166
http://www.vupen.com/english/advisories/2011/0371
http://blog.metasploit.com/2011/02/metasploit-framework-352-released.html
http://osvdb.org/70857
http://secunia.com/advisories/43166
http://www.vupen.com/english/advisories/2011/0371

Get alerted when CVE-2011-1056 or the next vulnerability affects your stack