Secunia

Two vulnerabilities have been discovered in Easy Address Book Web Server, which can be exploited by malicious people to disclose sensitive information and conduct cross-site request forgery attacks.

1) An error exists within the handling of alternate data streams. When running on a NTFS file system, this can be exploited to disclose the contents of arbitrary files in the web root by appending "::$DATA" to the request. This makes it possible to gain knowledge of user and administrator login credentials as well as other sensitive information.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. create an arbitrary user with administrative privileges if a logged-in administrative user visits a malicious web site.

The vulnerabilities are confirmed in version 1.2. Other versions may be affected as well.

Solution
Filter "::$DATA" in a proxy or firewall with URL filtering capabilities. Restrict access to the service. Do not browse untrusted sites or follow untrusted links while being logged-in to the application.

Provided and/or discovered by
1) Greg Linares
2) Markot

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area