Info

Disclosure

Dec 31, 2005

Discovery

Unknown

Dates

Exploit

Dec 31, 2005

Solution

Unknown

Description

eFileGo contains a flaw that may allow a remote denial of service. The issue is triggered when an attempt is made to upload a file to an invalid directory. This will result in the 'upload'exe' program consuming large amounts of CPU resources on the system, potentially leading to loss of availability for the platform.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Paqtools

eFileGo

3.01

References

Security Tracker: 1015430
Bugtraq ID: 16124
Secunia Advisory ID: 18279
CVE ID: 2005-4623 (see also: NVD)
Related OSVDB ID: 22151
Other Advisory URL: http://www.ipomonis.com/advisories/PaQFile_Share.txt
Vendor URL: http://www.paqtool.com/

Credit

Dr_insane - dr_insanepathfinder.gr - Personal Page

Direct URL: http://osvdb.org/22152