rapid7/metasploit-framework

View on GitHub
modules/exploits/osx/mdns/upnp_location.rb

Summary

Maintainability
B
5 hrs
Test Coverage

Method initialize has 63 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(update_info(info,
      'Name' => 'Mac OS X mDNSResponder UPnP Location Overflow',
      'Description'    => %q{
          This module exploits a buffer overflow that occurs when processing
Severity: Major
Found in modules/exploits/osx/mdns/upnp_location.rb - About 2 hrs to fix

    Method scan_for_upnp_port has 36 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def scan_for_upnp_port
        @upnp_port = 0
        @found_upnp_port = false
    
        upnp_port = 0
    Severity: Minor
    Found in modules/exploits/osx/mdns/upnp_location.rb - About 1 hr to fix

      Method exploit has 32 lines of code (exceeds 25 allowed). Consider refactoring.
      Open

        def exploit
          #
          # It is very important that we scan for the upnp port.  We must
          # receive the TCP connection and hold it open, otherwise the
          # code path that uses the overwritten function pointer most
      Severity: Minor
      Found in modules/exploits/osx/mdns/upnp_location.rb - About 1 hr to fix

        There are no issues that match your filters.

        Category
        Status