PT-2019-9667 · Efs · Easy File Sharing Web Server

Published 2019-05-13 · Updated 2020-08-24 · CVE-2018-18912

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy File Sharing (EFS) Web Server version 7.2

Description A stack-based buffer overflow issue occurs when a malicious POST request is made to the "forum.ghp" endpoint upon creating a new topic in the forums. This allows remote attackers to execute arbitrary code.

Recommendations For Easy File Sharing (EFS) Web Server version 7.2, consider restricting access to the forum functionality until a patch is available. As a temporary workaround, avoid using the forum.ghp endpoint for creating new topics in the forums. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-18912

Affected Products

Easy File Sharing Web Server

References · 3

• 🔥 https://github.com/notkisi/CVE-s/blob/master/CVE-2018-18912.py · Exploit
• https://osv.dev/vulnerability/CVE-2018-18912 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18912 · Security Note