|
Family: CGI abuses --> Category: attack
Easy File Sharing Web Server Information Disclosure Vulnerability Scan
Vulnerability Scan Summary Tries to read a local file via EFS
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server is affected by an information disclosure
vulnerability.
Description :
The version of Easy File Sharing Web Server that is installed on the
remote host fails to restrict access to files via alternative data
streams. By passing a specially-crafted request to the web server, an
attacker may be able to access privileged information.
See Also :
http://www.milw0rm.com/exploits/2690
Solution :
Unknown at this time.
Threat Level:
Low / CVSS Base Score : 2.3
(AV:R/AC:L/Au:NR/C:P/I:N/A:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|