PT-2005-5288 · Efilego · Efilego

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4622

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eFileGo version 3.01

Description A directory traversal issue allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files. This can be achieved by including a (triple dot) in the URL on port 608 or in the argument to upload.exe.

Recommendations For eFileGo version 3.01, consider restricting access to the upload.exe and limiting the ability to execute arbitrary code or upload files until a fix is available. As a temporary workaround, avoid using the (triple dot) in the URL on port 608 and in arguments to upload.exe to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-4622

Affected Products

Efilego

References · 7

• 🔥 http://secunia.com/advisories/18279 · Exploit
• 🔥 http://securityfocus.com/bid/16124 · Exploit
• 🔥 https://exploit-db.com/exploits/27024 · Exploit
• 🔥 http://securitytracker.com/id?1015430 · Exploit
• 🔥 http://osvdb.org/22151 · Exploit
• 🔥 http://ipomonis.com/advisories/PaQFile_Share.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4622 · Security Note