{"vulnerability": "CVE-2014-1649", "sightings": [{"uuid": "2ebbd02a-31c7-4470-a8ef-c5f4a194b041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1649", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "361a059a-0d6e-486e-b618-dabe6e767e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1649", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:26.000000Z"}, {"uuid": "ed630c4e-2c39-4537-a9f1-26880f129c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1649", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/antivirus/symantec_workspace_streaming_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c1fbe8e2-98bd-48d9-a134-2a77ab97d518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-1649", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33521", "content": "", "creation_timestamp": "2014-05-26T00:00:00.000000Z"}, {"uuid": "726b6385-1309-4e43-920f-e5ea7b6a07a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1649", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/antivirus/symantec_workspace_streaming_exec.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a code execution flaw in Symantec Workspace Streaming. The\\n          vulnerability exists in the ManagementAgentServer.putFile XMLRPC call exposed by the\\n          as_agent.exe service, which allows for uploading arbitrary files under the server root.\\n          This module abuses the auto deploy feature in the JBoss as_ste.exe instance in order\\n          to achieve remote code execution. This module has been tested successfully on Symantec\\n          Workspace Streaming 6.1 SP8 and Windows 2003 SP2, and reported to affect 7.5.0.x.\\n          Abused services listen on a single-machine deployment and also in the backend role in\\n          a multiple-machine deployment.\", \"disclosure_date\": \"2014-05-12\", \"fullname\": \"exploit/windows/antivirus/symantec_workspace_streaming_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"Symantec Workspace Streaming ManagementAgentServer.putFile XMLRPC Request Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/antivirus/symantec_workspace_streaming_exec.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/antivirus/symantec_workspace_streaming_exec\", \"references\": [\"CVE-2014-1649\", \"OSVDB-106923\", \"BID-67189\", \"ZDI-14-127\", \"URL-http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140512_00\"], \"rport\": 9855, \"session_types\": false, \"targets\": [\"Symantec Workspace Streaming 6.1 SP8 / Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:53.823072Z"}]}