Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending ::$DATA to the end of a HTTP GET request, which accesses the alternate data stream.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Efs_web_server | Efs_software | 4.0 (including) | 4.0 (including) |