PT-2020-13538 · Rejetto · Rejetto Hfs

Hyp3Rlinx · Published 2020-06-08 · Updated 2021-04-06 · CVE-2020-13432

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions rejetto HFS (aka HTTP File Server) version 2.3m Build #300

Description The issue allows remote attackers to trigger an invalid-pointer write access violation via concurrent HTTP requests with a long URI or long HTTP headers when virtual files or folders are used.

Recommendations For rejetto HFS (aka HTTP File Server) version 2.3m Build #300, consider disabling the use of virtual files or folders as a temporary workaround until a patch is available. Restrict access to the server to minimize the risk of exploitation by limiting concurrent HTTP requests.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-13432

Affected Products

Rejetto Hfs

References · 11

• 🔥 https://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/HFS-HTTP-FILE-SERVER-v2.3-REMOTE-BUFFER-OVERFLOW-DoS.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/157980/HFS-Http-File-Server-2.3m-Build-300-Buffer-Overflow.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/Jun/13 · Exploit
• https://github.com/rejetto/hfs2/commit/b8ebfc4e22948e1a61506cd66e397b61ea5ea5de · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-13432 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13432 · Vendor Advisory
• https://rejetto.com/hfs/?f=wn · Vendor Advisory
• https://t.me/cvenotify/12722 · Telegram Post
• https://t.me/defcon_news/49197 · Telegram Post
• http://seclists.org/fulldisclosure/2021/Apr/12 · Note