CVE-2014-8517

This Metasploit module exploits CVE-2014-8517 in tnftp by leveraging the arbitrary command execution vulnerability when the output filename begins with a '|' character, allowing command injection via the popen() function.

This exploit leverages CVE-2014-8517 in tnftp (FreeBSD FTP client) by intercepting HTTP requests and injecting a malicious redirect to execute an xterm command via pipe injection. It requires DNS spoofing to redirect the victim to a fake webserver.

This Metasploit module exploits CVE-2014-8517 in tnftp by crafting a malicious URI that triggers command execution via the 'savefile' feature when the output filename starts with a '|' character.