Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2014-8517 — Command Injection in Netbsd

CWE-77 — Command Injection14 documents10 sources
Severity
7.5HIGHNVD
EPSS
85.0%
top 0.65%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Apple MAC OS XNetbsd
Timeline
PublishedNov 17
Latest updateMay 17

Description

The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/mac_os_x4 versions+3

Also affects: Netbsd 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.2, 5.2.1, 5.2.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.1, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5

Patches

Patch: ftp.netbsd.org ↗Patch: ftp.netbsd.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-5gp4-x3wh-cxgj: The fetch_url function in usr↗2022-05-17
▶
CVEList
CVE-2014-8517: The fetch_url function in usr↗2014-11-17
▶
OSV
CVE-2014-8517: The fetch_url function in usr↗2014-11-17
▶

💥Exploits & PoCs

3
Exploit-DB
tnftp - 'savefile' Arbitrary Command Execution (Metasploit)↗2017-11-03
▶
Exploit-DB
tnftp (FreeBSD 8/9/10) - 'tnftp' Client Side↗2014-12-02
▶
Metasploit
tnftp "savefile" Arbitrary Command Execution↗
▶

📋Vendor Advisories

3
BSD
FreeBSD-SA-14:26.ftp: Remote command execution in ftp(1)↗2014-11-04
▶
Debian
CVE-2014-8517: tnftp - The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 th...↗2014
▶
Apple
CVE-2014-8517: OS X Yosemite v10.10.2 and Security Update 2015-001↗
▶

💬Community

4
Bugzilla
CVE-2014-8517 tnftp: ftp client could be forced to execute arbitrary commands [fedora-all]↗2014-10-29
▶
Bugzilla
CVE-2014-8517 tnftp: ftp client could be forced to execute arbitrary commands [epel-7]↗2014-10-29
▶
Bugzilla
CVE-2014-8517 tnftp: ftp client could be forced to execute arbitrary commands [epel-6]↗2014-10-29
▶
Bugzilla
CVE-2014-8517 tnftp: ftp client could be forced to execute arbitrary commands↗2014-10-29
▶