Lucene search

K
cveMitreCVE-2006-1159
HistoryMar 12, 2006 - 9:02 p.m.

CVE-2006-1159

2006-03-1221:02:00
mitre
web.nvd.nist.gov
25
cve-2006-1159
format string vulnerability
easy file sharing
efs web server
denial of service
server crash
arbitrary code
http get request

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

High

EPSS

0.143

Percentile

95.8%

Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request.

Affected configurations

Nvd
Node
efs_softwareefs_web_serverMatch3.2
VendorProductVersionCPE
efs_softwareefs_web_server3.2cpe:2.3:a:efs_software:efs_web_server:3.2:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

High

EPSS

0.143

Percentile

95.8%

Related for CVE-2006-1159