CVE-2014-3791

Name of the Vulnerable Software and Affected Versions Easy File Sharing (EFS) Web Server version 6.8

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the UserID parameter to the "vfolder.ghp" endpoint.

Recommendations For Easy File Sharing (EFS) Web Server version 6.8, consider restricting access to the "vfolder.ghp" endpoint until a patch is available. As a temporary workaround, avoid using long strings in the UserID parameter to minimize the risk of exploitation.