{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2014-6287/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2014-6287/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2014-6287/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2014-6287/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2014-6287/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2014-6287"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2014-6287"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2014/CVE-2014-6287.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: 'CVE-2014-6287'\n\ninfo:\n  name: HTTP File Server <2.3c - Remote Command Execution\n  author: j4vaovo\n  severity: critical\n  description: |\n    HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.\n  impact: |\n    Successful exploitation of this vulnerability allows remote attackers to execute arbitrary commands on the target system.\n  remediation: |\n    Upgrade to the latest version of HTTP File Server (>=2.3c) to mitigate this vulnerability.\n  reference:\n    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6287\n    - http://www.kb.cert.org/vuls/id/251276\n    - http://packetstormsecurity.com/files/128243/HttpFileServer-2.3.x-Remote-Command-Execution.html\n    - https://github.com/rapid7/metasploit-framework/pull/3793\n    - https://nvd.nist.gov/vuln/detail/CVE-2014-6287\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2014-6287\n    cwe-id: CWE-94\n    epss-score: 0.99323\n    epss-percentile: 0.99938\n    cpe: cpe:2.3:a:rejetto:http_file_server:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: rejetto\n    product: http_file_server\n    shodan-query: http.favicon.hash:2124459909\n    fofa-query: icon_hash=2124459909\n  tags: cve2014,cve,packetstorm,msf,hfs,rce,kev,rejetto,vkev,vuln\nvariables:\n  str1: '{{rand_base(6)}}'\n  str2: 'CVE-2014-6287'\n\nhttp:\n  - method: GET\n    path:\n      - '{{BaseURL}}/?search==%00{.cookie|{{str1}}|value%3d{{str2}}.}'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '<title>HFS /</title>'\n\n      - type: word\n        part: header\n        words:\n          - 'Set-Cookie: {{str1}}={{str2}};'\n          - 'text/html'\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 490a004630440220585a54d945e963d4a1860986e9fd6bad6a9ad8a49f7c8dc9108c38766a21831f022014245d129d8bc30004a1c63218343e99cff46b56f993ba97dfff7ac5941fdc35:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2014-6287"
}