efsStream.txt

/ ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy Address Book Web Server is vulnerable to file stream exploi...

Solaris 5.6 (sparc) : 108156-17

SunScreen EFS 3.0b Sparc miscellaneous fixes.. Date this patch was last updated by Sun : Dec/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 106881-03

The remote host is missing Sun Security Patch number 106881-03 SunScreen EFS 2.0: NAT, MP, and FW-1 conversion fixes. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scrip...

Solaris 5.7 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 105237-09

The remote host is missing Sun Security Patch number 105237-09 SunScreen EFS 1.1: miscellaneous fixes including NAT. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script...

Solaris 5.6 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.7 (sparc) : 108156-17

SunScreen EFS 3.0b Sparc miscellaneous fixes.. Date this patch was last updated by Sun : Dec/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106881-03

The remote host is missing Sun Security Patch number 106881-03 SunScreen EFS 2.0: NAT, MP, and FW-1 conversion fixes. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scrip...

CVE-2006-5714

Affected software: Easy File Sharing Web Server (EFS) Web Server 4.0. Vulnerability: remote information disclosure via alternate data streams. The bug occurs on NTFS filesystems when a crafted HTTP GET appends ":$DATA" to access ADS, allowing reading arbitrary files under the web root. Root cause...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

CVE-2006-5715: Undefined Security Weakness

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5714: Undefined Security Weakness

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5713: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...

EFS Easy Address Book Web Server 1.2 - Remote File Stream

EFS Easy Address Book Web Server 1.2 - Remote File Stream / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy...

EFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit

Exploit for unknown platform in category remote exploits ================================================================== EFS Easy Address Book Web Server GLinares.code at gmail dot com This tool demonstrates EFS' Easy Address Book Web Server Vulnerability to Alternative Data Stream GET request...

eabweb.txt

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...

[EXPL] Easy File Sharing FTP Server PASS Buffer Overflow &#40;Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Immunity Canvas: EASYFILESHARING

Name| easyfilesharing ---|--- CVE| CVE-2006-3952 Exploit Pack| CANVAS Description| easyfilesharing Notes| CVSS: 7.5 Repeatability: One shot VENDOR: EFS Software CVE Url: https://vulners.com/cve/CVE-2006-3952 CVE Name: CVE-2006-3952...

CVE-2006-3952

The CVE-2006-3952 issue concerns Easy File Sharing Software’s FTP server (EFS FTP Server). A stack-based buffer overflow is triggered by a long PASS command parameter, allowing remote attackers to execute arbitrary code. The original report targets Easy File Sharing FTP Server 2.0, and later refe...