CVE-2006-1159

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-12 · updated 2026-06-16

Description

Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request.

Affected products

EFS Software Efs Web Server: 3.2

References

http://secunia.com/advisories/19178
http://www.osvdb.org/23792
http://www.securityfocus.com/archive/1/427158/100/0/threaded
http://www.securityfocus.com/bid/17046
http://www.vupen.com/english/advisories/2006/0912
https://exchange.xforce.ibmcloud.com/vulnerabilities/25135
http://secunia.com/advisories/19178
http://www.osvdb.org/23792
http://www.securityfocus.com/archive/1/427158/100/0/threaded
http://www.securityfocus.com/bid/17046
http://www.vupen.com/english/advisories/2006/0912
https://exchange.xforce.ibmcloud.com/vulnerabilities/25135

Get alerted when CVE-2006-1159 or the next vulnerability affects your stack