VulnerabilityModified
CVE-2006-5714
Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream.
MEDIUM 5.0EPSS 6.25%
Does this matter?
Lower severity and a low EPSS score (6.25%). Track it; it rarely justifies an emergency change on its own.
Description
Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 6.25% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- efs software/efs web server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22602Vendor Advisory
- http://www.securityfocus.com/bid/20823Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29925
- https://www.exploit-db.com/exploits/2690
- http://secunia.com/advisories/22602Vendor Advisory
- http://www.securityfocus.com/bid/20823Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29925
- https://www.exploit-db.com/exploits/2690
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.