Easy File Sharing Web Server Remote Denial Of Service Vulnerability

Bugtraq ID:	11036
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 24 2004 12:00AM
Updated:	Aug 24 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to James Bercegay of the GulfTech Security Research Team.
Vulnerable:	EFS Software Easy File Sharing Web Server 1.25 EFS Software Easy File Sharing Web Server 1.2
Not Vulnerable:

Easy File Sharing Web Server Remote Denial Of Service Vulnerability

Easy File Sharing Web Server is reported prone to a remote denial of service vulnerability.

It is reported that the vulnerability will present itself when the Easy File Sharing Web Server handles large HTTP requests.

A remote attacker may exploit this vulnerability to deny service to legitimate users.

Easy File Sharing Web Server Remote Denial Of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/efswsdos.pl

Easy File Sharing Web Server Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Easy File Sharing Web Server Remote Denial Of Service Vulnerability

References:

• Easy File Sharing Webserver v1.25 Vulnerabilities (GulfTech)
  
• Easy File Sharing Web Server (EFS Software)
  
• Easy File Sharing Webserver v1.25 Vulnerabilities ("GulfTech Security" )