CVE-2014-6287

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score92.5540%

EPSS Percentile92.39th

Published2014年10月7日

Last Modified2026年4月22日

Vulnerability Description

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

Affected Platforms (CPE)

📦

Rejetto

Http File Server

>= 2.3 and < 2.3c

References & Advisories

🔗 http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html

🔗 http://packetstormsecurity.com/files/135122/Rejetto-HTTP-File-Server-2.3.x-Remote-Code-Execution.html

🔗 http://packetstormsecurity.com/files/160264/Rejetto-HttpFileServer-2.3.x-Remote-Command-Execution.html

🔗 http://packetstormsecurity.com/files/161503/HFS-HTTP-File-Server-2.3.x-Remote-Code-Execution.html

🔗 http://www.kb.cert.org/vuls/id/251276

🔗 https://github.com/rapid7/metasploit-framework/pull/3793

🔗 https://www.exploit-db.com/exploits/39161/

🔗 http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html

Vulnerability Description

Affected Platforms (CPE)

Http File Server

References & Advisories

関連する脆弱性情報