CVE-2006-1160: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file...

CVE-2004-1744

Technical details about CVE-2004-1744 are not provided in the connected documents. The Initial Description lacks vendor/product/version specifics or fixes. Monitor for updates.

CVE-2004-1743

CVE-2004-1743 affects Easy File Sharing (EFS) Webserver 1.25. The vulnerability allows remote attackers to view arbitrary files by sending an HTTP request targeting the disk_c virtual folder. The root cause is improper access handling in the web server’s disk_c folder, resulting in exposure of fi...

CVE-2004-1744: Undefined Security Weakness

Easy File Sharing EFS Webserver 1.25 allows remote attackers to cause a denial of service CPU consumption or crash via many large HTTP requests...

CVE-2004-1743: Undefined Security Weakness

Easy File Sharing EFS Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the diskc virtual folder...

00045-08242004.txt

GulfTech Security Research August, 24th 2004 Vendor : EFS Software Inc. URL : http://www.sharing-file.com Version : Easy File Sharing Webserver v1.25 Risk : Unauthorized System Access && DoS Description: Easy File Sharing Web Server is a file sharing software that allows visitors to upload/downlo...

CVE-2002-0788

CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...

NTFS encryption information leakage problem in PGP

If "wiping file on deletion" option is used EFS temporary files are not deleted during file encryption...

NTFS and PGP interact to expose EFS encrypted data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NTFS and PGP interact to expose EFS encrypted data c 2002 Ry Jones, Airgap Networks. Summary: NTFS, a feature of Windows XP, supports an "encrypted" attribute. PGP 7.0.3 Freeware, a product of Network Associates, supports wiping files as they are...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...

CVE-2000-0420: Undefined Security Weakness

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...