VulnerabilityModified
CVE-2006-1161
Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder.
MEDIUM 6.5EPSS 2.77%
Does this matter?
Lower severity and a low EPSS score (2.77%). Track it; it rarely justifies an emergency change on its own.
Description
Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 2.77% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- efs software/efs web server
- Source
- cve@mitre.org
References
- http://www.osvdb.org/23791
- http://www.securityfocus.com/archive/1/427158/100/0/threaded
- http://www.securityfocus.com/bid/17046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39994
- http://www.osvdb.org/23791
- http://www.securityfocus.com/archive/1/427158/100/0/threaded
- http://www.securityfocus.com/bid/17046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39994
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.