Solaris 5.7 (x86) : 108157-16

SunScreen EFS 3.0b Intel miscellaneous fixes.. Date this patch was last updated by Sun : Jan/03/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 105237-09

The remote host is missing Sun Security Patch number 105237-09 SunScreen EFS 1.1: miscellaneous fixes including NAT. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script...

Solaris 5.6 (sparc) : 108156-17

SunScreen EFS 3.0b Sparc miscellaneous fixes.. Date this patch was last updated by Sun : Dec/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.5.1 (sparc) : 106881-03

The remote host is missing Sun Security Patch number 106881-03 SunScreen EFS 2.0: NAT, MP, and FW-1 conversion fixes. Date this patch was last updated by Sun : Wed Sep 08 18:00:00 MDT 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scrip...

CVE-2006-5715

CVE-2006-5715 affects Easy File Sharing (EFS) Easy Address Book 1.2 when run on NTFS. The vulnerability allows remote attackers to read arbitrary files under the web root by appending the ADS suffix ::$DATA to an HTTP GET, accessing an alternate data stream. The description confirms the root caus...

CVE-2006-5714

Affected software: Easy File Sharing Web Server (EFS) Web Server 4.0. Vulnerability: remote information disclosure via alternate data streams. The bug occurs on NTFS filesystems when a crafted HTTP GET appends ":$DATA" to access ADS, allowing reading arbitrary files under the web root. Root cause...

CVE-2006-5713

CVE-2006-5713 describes an XSS vulnerability in Easy File Sharing (EFS) Web Server 4.0. The issue allows remote attackers to inject arbitrary web script or HTML through the forum-thread posting parameters: author, content, or title. The metadata indicates cross-site scripting with no confidential...

EFS Easy Address Book Web Server <= 1.2 Remote File Stream Exploit

Exploit for unknown platform in category remote exploits ================================================================== EFS Easy Address Book Web Server GLinares.code at gmail dot com This tool demonstrates EFS' Easy Address Book Web Server Vulnerability to Alternative Data Stream GET request...

EFS Easy Address Book Web Server 1.2 - Remote File Stream

EFS Easy Address Book Web Server 1.2 - Remote File Stream / ========================================================================== 0-day Alternative File Stream Exploit for EFS Easy Address Book Web Server =========================================================================== EFS' Easy...

eabweb.txt

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...

[EXPL] Easy File Sharing FTP Server PASS Buffer Overflow &#40;Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Immunity Canvas: EASYFILESHARING

Name| easyfilesharing ---|--- CVE| CVE-2006-3952 Exploit Pack| CANVAS Description| easyfilesharing Notes| CVSS: 7.5 Repeatability: One shot VENDOR: EFS Software CVE Url: https://vulners.com/cve/CVE-2006-3952 CVE Name: CVE-2006-3952...

CVE-2006-3952

The CVE-2006-3952 issue concerns Easy File Sharing Software’s FTP server (EFS FTP Server). A stack-based buffer overflow is triggered by a long PASS command parameter, allowing remote attackers to execute arbitrary code. The original report targets Easy File Sharing FTP Server 2.0, and later refe...

CVE-2003-1296

CVE-2003-1296 affects Easy File Sharing (EFS) Web Server 1.2. The issue allows remote authenticated users to cause a denial of service by supplying an empty “Title” field or certain data in the “Your Message” field (potentially a long argument). No exploit details or remediation are provided in t...

CVE-2003-1297

CVE-2003-1297 affects Easy File Sharing (EFS) Web Server 1.2. The web server stores the option.ini (options.ini) file and the log directory under the web root with insufficient access control, enabling remote attackers to read sensitive data. The disclosed data can include an SMTP account usernam...

CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...

Cross site scripting

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1160

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1161

CVE-2006-1161 affects Easy File Sharing Web Server (EFS) Web Server 3.2. It describes an absolute path traversal that allows remote registered users to upload a malicious file to the Windows startup folder and thereby execute arbitrary code. The provided documents consistently identify the vulner...

CVE-2006-1159

Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...