CVE-2014-3791 Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.
HighCVSS 10.0
EPSS 78.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efssoft easy file sharing web server | = 6.8 | No fix listed |
References
- blog.techorganic.com exploit
- 106965 vdb-entry
- packetstormsecurity.com exploit
- 33352 exploit
- 67406 vdb-entry