CVE-2014-3744
published 2017-10-23CVE-2014-3744: Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in…
PriorityP265high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
34.01%
98.2th percentile
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nodejs | node.js | <= 0.2.4 | — |
Detection & IOCsextracted from sources · hover to see the quote
yara↗
rule CVE_2014_3744_nodejs_st_traversal { strings: $traversal = "%2e%2e" ascii nocase condition: $traversal }- →Look for HTTP GET requests containing URL-encoded dot-dot sequences (%2e%2e) in the path, particularly under a /public/ directory prefix, targeting sensitive files such as /etc/passwd. ↗
- →A successful exploitation response will return HTTP 200 with content matching the regex 'root:.*:0:0:' indicating /etc/passwd was read. ↗
- →The attack path pattern to detect is: /public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd — five levels of encoded traversal from a static-serving mount point. ↗
- ·Vulnerability only affects the Node.js 'st' module versions before 0.2.5; systems running st >= 0.2.5 are not affected. ↗
- ·The traversal path used in the nuclei template assumes the static files are served under a /public/ mount point; actual mount points may differ per deployment, requiring path adjustment in detection rules. ↗
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
osv7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Directory Traversal in st
ghsa·2020-08-31
CVE-2014-3744 [HIGH] CWE-22 Directory Traversal in st
Directory Traversal in st
Versions of `st` prior to 0.2.5 are affected by a directory traversal vulnerability. Vulnerable versions fail to properly handle URL encoded dots, which caused `%2e` to be interpreted as `.` by the filesystem, resulting the potential for an attacker to read sensitive files on the server.
## Recommendation
Update to version 0.2.5 or later.
OSV
Directory Traversal in st
osv·2020-08-31
CVE-2014-3744 [HIGH] Directory Traversal in st
Directory Traversal in st
Versions of `st` prior to 0.2.5 are affected by a directory traversal vulnerability. Vulnerable versions fail to properly handle URL encoded dots, which caused `%2e` to be interpreted as `.` by the filesystem, resulting the potential for an attacker to read sensitive files on the server.
## Recommendation
Update to version 0.2.5 or later.
OSV
CVE-2014-3744: Directory traversal vulnerability in the st module before 0
osv·2017-10-23·CVSS 7.5
CVE-2014-3744 [HIGH] CVE-2014-3744: Directory traversal vulnerability in the st module before 0
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
No detection rules found.
Nuclei
Node.js st module Directory Traversal
nuclei·CVSS 7.5
CVE-2014-3744 [HIGH] Node.js st module Directory Traversal
Node.js st module Directory Traversal
A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
Template:
id: CVE-2014-3744
info:
name: Node.js st module Directory Traversal
author: geeknik
severity: high
description: A directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
impact: |
An attacker can read sensitive files on the server, potentially leading to unauthorized access or exposure of sensitive information.
remediation: |
Upgrade to a patched version of the st module or use an alternative module that is not vulnerable to directory trave
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2014/05/13/1http://www.openwall.com/lists/oss-security/2014/05/15/2http://www.securityfocus.com/bid/67389https://github.com/isaacs/sthttps://nodesecurity.io/advisories/st_directory_traversalhttp://www.openwall.com/lists/oss-security/2014/05/13/1http://www.openwall.com/lists/oss-security/2014/05/15/2http://www.securityfocus.com/bid/67389https://github.com/isaacs/sthttps://nodesecurity.io/advisories/st_directory_traversal
2017-10-23
Published