CVE-2014-6287

Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

Http File Server

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

7. Okt 2014

Ausgewertete Quellen

• Hinweis
  http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html
• Hinweis
  http://packetstormsecurity.com/files/135122/Rejetto-HTTP-File-Server-2.3.x-Remote-Code-Execution.html
• Hinweis
  http://packetstormsecurity.com/files/160264/Rejetto-HttpFileServer-2.3.x-Remote-Command-Execution.html
• Hinweis
  http://packetstormsecurity.com/files/161503/HFS-HTTP-File-Server-2.3.x-Remote-Code-Execution.html
• Hinweis
  http://www.kb.cert.org/vuls/id/251276
• Hinweis
  https://www.exploit-db.com/exploits/39161/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-6287
• CISA
  Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
• NVD
  CVE-2014-6287