PT-2019-9667 · Efs · Easy File Sharing Web Server

Publicado 2019-05-13 · Atualizado 2020-08-24 · CVE-2018-18912

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy File Sharing (EFS) Web Server version 7.2

Description A stack-based buffer overflow issue occurs when a malicious POST request is made to the "forum.ghp" endpoint upon creating a new topic in the forums. This allows remote attackers to execute arbitrary code.

Recommendations For Easy File Sharing (EFS) Web Server version 7.2, consider restricting access to the forum functionality until a patch is available. As a temporary workaround, avoid using the forum.ghp endpoint for creating new topics in the forums. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

RCE

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-18912

Produtos afetados

Easy File Sharing Web Server

Referências · 3

• 🔥 https://github.com/notkisi/CVE-s/blob/master/CVE-2018-18912.py · Exploit
• https://osv.dev/vulnerability/CVE-2018-18912 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18912 · Nota de Segurança