CVE-2006-1160

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2006-1160

CVE-2006-1160 affects Easy File Sharing Web Server (EFS) Web Server 3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Description field when creating a folder or uploading a file. The provided sources specify th...

CVE-2004-1743

CVE-2004-1743 affects Easy File Sharing (EFS) Webserver 1.25. The vulnerability allows remote attackers to view arbitrary files by sending an HTTP request targeting the disk_c virtual folder. The root cause is improper access handling in the web server’s disk_c folder, resulting in exposure of fi...

CVE-2004-1744

Technical details about CVE-2004-1744 are not provided in the connected documents. The Initial Description lacks vendor/product/version specifics or fixes. Monitor for updates.

00045-08242004.txt

GulfTech Security Research August, 24th 2004 Vendor : EFS Software Inc. URL : http://www.sharing-file.com Version : Easy File Sharing Webserver v1.25 Risk : Unauthorized System Access && DoS Description: Easy File Sharing Web Server is a file sharing software that allows visitors to upload/downlo...

CVE-2002-0788

CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...

NTFS encryption information leakage problem in PGP

If "wiping file on deletion" option is used EFS temporary files are not deleted during file encryption...

NTFS and PGP interact to expose EFS encrypted data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NTFS and PGP interact to expose EFS encrypted data c 2002 Ry Jones, Airgap Networks. Summary: NTFS, a feature of Windows XP, supports an "encrypted" attribute. PGP 7.0.3 Freeware, a product of Network Associates, supports wiping files as they are...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...