# N/A
## 漏洞概述
findMacroMarker 函数在 Rejetto HTTP File Server (HFS 或 HttpFileServer) 的 parserLib.pas 文件中存在漏洞，允许远程攻击者通过在搜索操作中使用 `%00` 序列来执行任意程序。
## 影响版本
Rejetto HTTP File Server 2.3x 版本中，影响范围为 2.3x 之前的所有版本，直到 2.3c 版本为止。
## 漏洞细节
在 parserLib.pas 文件中的 findMacroMarker 函数处存在漏洞。当执行搜索操作时，若输入中包含 `%00` 序列（空字节），远程攻击者可以利用此漏洞执行任意程序。
## 漏洞影响
远程攻击者可以通过构造特定的搜索请求（包含 `%00` 字节序列），在受影响的服务器上执行任意程序，从而导致系统被恶意控制或数据泄露等严重后果。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | HttpFileServer httpd 2.3 | https://github.com/roughiz/cve-2014-6287.py | POC详情 |
| 2 | None | https://github.com/Nicoslo/Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287 | POC详情 |
| 3 | A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 | https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287 | POC详情 |
| 4 | a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit. | https://github.com/mrintern/thm_steelmountain_CVE-2014-6287 | POC详情 |
| 5 | CVE-2014-6287 Rejetto HFS 2.3 | https://github.com/hadrian3689/rejetto_hfs_rce | POC详情 |
| 6 | CVE-2014-6287 | https://github.com/randallbanner/Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution | POC详情 |
| 7 | Rejetto http File Server 2.3.x (Reverse shell) | https://github.com/0xTabun/CVE-2014-6287 | POC详情 |
| 8 | Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c | https://github.com/zhsh9/CVE-2014-6287 | POC详情 |
| 9 | None | https://github.com/francescobrina/hfs-cve-2014-6287-exploit | POC详情 |
| 10 | Rejetto http File Server 2.3.x (Reverse shell) | https://github.com/10cks/CVE-2014-6287 | POC详情 |
| 11 | HTTP File Server before 2.3c is susceptible to remote command execution. The findMacroMarker function in parserLib.pas allows an attacker to execute arbitrary programs via a %00 sequence in a search action. Therefore, an attacker can obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6287.yaml | POC详情 |
| 12 | Rejetto HttpFileServer 2.3.x - Remote Command Execution (RevShell) | https://github.com/Z3R0-0x30/CVE-2014-6287 | POC详情 |
| 13 | This repository contains Detailed explanation and working poc for Rejetto HTTP File Server (HFS) 2.3.x - Remote Command Execution. | https://github.com/rahisec/rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 | POC详情 |
暂无评论