CVE-2006-5715

Easy File Sharing (EFS) Easy Address Book 1.2 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-5715. PoCs published by Greg Linares.

AI-analyzed exploit summary This exploit demonstrates an alternative data stream vulnerability in EFS Easy Address Book Web Server, allowing unauthorized file access via crafted HTTP GET requests. It retrieves sensitive files such as user credentials, RSA keys, and server configurations.

Description

Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Greg Linares · cremotewindows
https://www.exploit-db.com/exploits/2699

This exploit demonstrates an alternative data stream vulnerability in EFS Easy Address Book Web Server, allowing unauthorized file access via crafted HTTP GET requests. It retrieves sensitive files such as user credentials, RSA keys, and server configurations.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: EFS Easy Address Book Web Server
No auth needed
Prerequisites: Network access to the target server · Target server running EFS Easy Address Book Web Server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20861
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22681
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29976
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2699
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4312

Scores

EPSS 0.0621
EPSS Percentile 92.6%

Details

Status published
Products (1)
efs_software/easy_address_book 1.2
Published Nov 04, 2006
Tracked Since Feb 18, 2026