Home[1] Files[2] News[3] Contact[4] Add New[5]
- Microsoft Windows EFSRPC Arbitrary File Upload / Privilege Escalation[6]
- Authored by James Forshaw[7], Google Security Research[8]
-
The EFSRPC service on Microsoft Windows Server versions 2019 and 2022 does not prevent a caller specifying a local device path allowing any authenticated user to upload arbitrary files to a server.
- systems | windows[9]
- advisories | CVE-2021-43893[10]
- MD5 |
afc6cc4bf0749f217e9277351f3b9e94
- Download[11] | Favorite[12] | View[13]
File Tags
- ActiveX[19] (932)
- Advisory[20] (76,523)
- Arbitrary[21] (14,929)
- BBS[22] (2,859)
- Bypass[23] (1,516)
- CGI[24] (1,009)
- Code Execution[25] (6,444)
- Conference[26] (664)
- Cracker[27] (797)
- CSRF[28] (3,244)
- DoS[29] (21,516)
- Encryption[30] (2,319)
- Exploit[31] (49,084)
- File Inclusion[32] (4,117)
- File Upload[33] (932)
- Firewall[34] (821)
- Info Disclosure[35] (2,531)
- Intrusion Detection[36] (841)
- Java[37] (2,719)
- JavaScript[38] (787)
- Kernel[39] (5,891)
- Local[40] (13,886)
- Magazine[41] (586)
- Overflow[42] (12,009)
- Perl[43] (1,409)
- PHP[44] (5,024)
- Proof of Concept[45] (2,271)
- Protocol[46] (3,226)
- Python[47] (1,365)
- Remote[48] (29,305)
- Root[49] (3,419)
- Ruby[50] (563)
- Scanner[51] (1,627)
- Security Tool[52] (7,627)
- Shell[53] (3,012)
- Shellcode[54] (1,192)
- Sniffer[55] (877)
- Spoof[56] (2,061)
- SQL Injection[57] (15,852)
- TCP[58] (2,345)
- Trojan[59] (666)
- UDP[60] (865)
- Virus[61] (657)
- Vulnerability[62] (30,103)
- Web[63] (8,849)
- Whitepaper[64] (3,695)
- x86[65] (939)
- XSS[66] (17,197)
- Other[67]
File Archives
- January 2022[68]
- December 2021[69]
- November 2021[70]
- October 2021[71]
- September 2021[72]
- August 2021[73]
- July 2021[74]
- June 2021[75]
- May 2021[76]
- April 2021[77]
- March 2021[78]
- February 2021[79]
- Older[80]
Systems
- AIX[81] (423)
- Apple[82] (1,853)
- BSD[83] (368)
- CentOS[84] (54)
- Cisco[85] (1,908)
- Debian[86] (5,946)
- Fedora[87] (1,690)
- FreeBSD[88] (1,241)
- Gentoo[89] (4,148)
- HPUX[90] (875)
- iOS[91] (309)
- iPhone[92] (108)
- IRIX[93] (220)
- Juniper[94] (67)
- Linux[95] (41,254)
- Mac OS X[96] (682)
- Mandriva[97] (3,105)
- NetBSD[98] (255)
- OpenBSD[99] (476)
- RedHat[100] (10,896)
- Slackware[101] (941)
- Solaris[102] (1,601)
- SUSE[103] (1,444)
- Ubuntu[104] (7,565)
- UNIX[105] (9,007)
- UnixWare[106] (182)
- Windows[107] (6,244)
- Other[108]
- Services
- Security Services[119]
- Hosting By
- Rokasec[120]