Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit (Win2K SP4)

No description provided by source. !/usr/bin/python Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability was discovered by h07 and a POC for windows XP SP2 polish version was provided. This exploit was tested on windows 2000 server SP4. The exploit binds a shell on TCP port 444...

efs20-remote.txt

!/usr/bin/python Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability was discovered by h07 and a POC for windows XP SP2 polish version was provided. This exploit was tested on windows 2000 server SP4. The exploit binds a shell on TCP port 4444. Author shall bear no...

Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit (Win2K SP4)

Exploit for unknown platform in category remote exploits ================================================================== Easy File Sharing FTP Server 2.0 PASS Remote Exploit Win2K SP4 ================================================================== !/usr/bin/python Remote exploit for Easy Fi...

Easy File Sharing FTP Server 2.0 (Windows 2000 SP4) - PASS Remote Overflow

Easy File Sharing FTP Server 2.0 Windows 2000 SP4 - PASS Remote Overflow !/usr/bin/python Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability was discovered by h07 and a POC for windows XP SP2 polish version was provided. This exploit was tested on windows 2000 server SP4. The...

w-agora version 4.2.1 Information Disclosure Vulnerability

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

samba security update

CentOS Errata and Security Advisory CESA-2007:0060 Updated samba packages that fix a denial of service vulnerability are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Samba provides file and printer sharing services to SMB/CIF...

uTorrent Installed

uTorrent, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid24341; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"uTorrent...

[SECURITY] Fedora Core 6 Update: samba-3.0.24-1.fc6

Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printers. The Windows NT, OS/2, and Linux operating systems support this natively, and add-on packages can enable the same thing for DOS, Windows,...

Samba服务器VFS插件afsacl.so远程格式串处理漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Samba的VFS插件afsacl.so库在处理文件名时存在格式串漏洞，攻击者可能利用此漏洞诱使用户处理恶意的VFS分区控制服务器。 Samba在调用snprintf时将磁盘上所储存的文件名用作了格式串，如果用户能够写入的共享使用Samba的afsacl.so库对AFS文件系统上的文件设置Windows NT访问控制列表的话，就可能通过文件名中的格式串标识符导致执行任意代码。 这个漏洞仅影响与CIFS共享了AFS文件系统并在smb.conf中明确要求加载afsacl.s...

Easy File Sharing FTP Server PASS Command Overflow

The remote host appears to be using Easy File Sharing FTP Server, an FTP server for Windows. The version of Easy File Sharing FTP Server installed on the remote host contains a stack-based buffer overflow vulnerability that can be exploited by an unauthenticated attacker with a specially crafted...

Easy File Sharing FTP Server Pass命令缓冲区溢出漏洞

Easy File Sharing FTP Server是一款FTP服务程序。 Easy File Sharing FTP Server处理PASS命令存在问题，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 提交超长字符串作为PASS命令参数，可导致触发缓冲区溢出，精心构建提交数据可能以进程权限执行任意指令。 EFS Software Easy File Sharing FTP Server 2.0 http://www.efssoft.com/products.htm http://sebug.net/vuldb/ssvid-5226...

Block MSN Messenger Live 8

Windows Live Messenger, formerly and still commonly known as MSN Messenger or MSN, is a freeware instant messaging client for Windows XP and Windows Vista. It is part of Microsoft's Windows Live set of online services.Released on June 19, 2006, MSN Messenger Live 8 has many features including...

Easy File Sharing Web Server Crafted Request ADS Arbitrary File Access

The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially crafted request to the web server, an attacker may be able to access privileged information. This script was written by Justin...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5713

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...

CVE-2006-5715

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5715

Easy File Sharing EFS Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...