Easy File Management Web Server Stack Buffer Overflow

Rocco Calvi

CVE
CVE-2014-3791
Affected Vendor
Easy File Management
Affected Product
Web Server
Exploit Type
Metasploit Module
Metasploit Module
exploit/windows/http/efs_fmws_userid_bof

Description

A stack buffer overflow in Easy File Management Web Server versions 4.0 and 5.3 triggered through improper validation of the UserID cookie parameter, enabling remote arbitrary code execution.

References