RSS   Vulnerabilities for 'Http file server'   RSS

2014-10-09
 
CVE-2014-7226

CWE-94
 

 
The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading a file with certain invalid UTF-8 byte sequences that are interpreted as executable macro symbols.

 
2014-10-07
 
CVE-2014-6287

 

 
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

 

 >>> Vendor: Rejetto 2 Products
Http file server
Http-file-server


Copyright 2024, cxsecurity.com

 

Back to Top