CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-5714

Affected software: Easy File Sharing Web Server (EFS) Web Server 4.0. Vulnerability: remote information disclosure via alternate data streams. The bug occurs on NTFS filesystems when a crafted HTTP GET appends ":$DATA" to access ADS, allowing reading arbitrary files under the web root. Root cause...