PatchTheCVEefs web server vulnerabilities and fixes
Recent CVEs affecting efs web server, with upgrade or downgrade steps. 7 tracked.
Also searched as: efswebserver.
efs web server has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-11-04. Highest priority: CVE-2006-1159 (score 56/100).
- CVE-2006-5714 MEDIUM 5.0 DOWNGRADE Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read a
- CVE-2006-5713 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to
- CVE-2006-1161 MEDIUM 6.5 DOWNGRADE Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users
- CVE-2006-1160 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to
- CVE-2006-1159 HIGH 7.8 DOWNGRADE Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denia
- CVE-2004-1744 MEDIUM 5.0 DOWNGRADE Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption o
- CVE-2004-1743 MEDIUM 5.0 DOWNGRADE Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for
FAQ
How do I fix efs web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is efs web server being exploited right now?
None of the tracked efs web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which efs web server CVE should I patch first?
CVE-2006-1159 currently ranks highest (56/100): Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denia.