CVE-2004-2426 Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST reques...
MediumCVSS 5.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axis 2100 network camera | = 2.12 | No fix listed |
| axis 2100 network camera | = 2.30 | No fix listed |
| axis 2100 network camera | = 2.31 | No fix listed |
| axis 2100 network camera | = 2.32 | No fix listed |
| axis 2100 network camera | = 2.33 | No fix listed |
| axis 2100 network camera | = 2.34 | No fix listed |
| axis 2100 network camera | = 2.40 | No fix listed |
| axis 2100 network camera | = 2.41 | No fix listed |
| axis 2110 network camera | = 2.12 | No fix listed |
| axis 2110 network camera | = 2.30 | No fix listed |
| axis 2110 network camera | = 2.31 | No fix listed |
| axis 2110 network camera | = 2.32 | No fix listed |
| axis 2110 network camera | = 2.34 | No fix listed |
| axis 2110 network camera | = 2.40 | No fix listed |
| axis 2110 network camera | = 2.41 | No fix listed |
| axis 2120 network camera | = 2.12 | No fix listed |
| axis 2120 network camera | = 2.30 | No fix listed |
| axis 2120 network camera | = 2.31 | No fix listed |
| axis 2120 network camera | = 2.32 | No fix listed |
| axis 2120 network camera | = 2.34 | No fix listed |
| axis 2120 network camera | = 2.40 | No fix listed |
| axis 2120 network camera | = 2.41 | No fix listed |
| axis 2130 ptz network camera | = 2.30 | No fix listed |
| axis 2130 ptz network camera | = 2.31 | No fix listed |
| axis 2130 ptz network camera | = 2.32 | No fix listed |
Show 49 more
| Product | Affected versions | Fixed in |
|---|---|---|
| axis 2130 ptz network camera | = 2.34 | No fix listed |
| axis 2130 ptz network camera | = 2.40 | No fix listed |
| axis 230 mpeg2 video server | = 3.11 | No fix listed |
| axis 2400 video server | = 1.1 | No fix listed |
| axis 2400 video server | = 1.2 | No fix listed |
| axis 2400 video server | = 1.10 | No fix listed |
| axis 2400 video server | = 1.11 | No fix listed |
| axis 2400 video server | = 1.12 | No fix listed |
| axis 2400 video server | = 1.15 | No fix listed |
| axis 2400 video server | = 2.0 | No fix listed |
| axis 2400 video server | = 2.20 | No fix listed |
| axis 2400 video server | = 2.30 | No fix listed |
| axis 2400 video server | = 2.31 | No fix listed |
| axis 2400 video server | = 2.32 | No fix listed |
| axis 2400 video server | = 2.33 | No fix listed |
| axis 2400 video server | = 2.34 | No fix listed |
| axis 2400 video server | = 3.11 | No fix listed |
| axis 2400 video server | = 3.12 | No fix listed |
| axis 2401 video server | = 1.0_1 | No fix listed |
| axis 2401 video server | = 1.15 | No fix listed |
| axis 2401 video server | = 2.20 | No fix listed |
| axis 2401 video server | = 2.30 | No fix listed |
| axis 2401 video server | = 2.31 | No fix listed |
| axis 2401 video server | = 2.32 | No fix listed |
| axis 2401 video server | = 2.33 | No fix listed |
| axis 2401 video server | = 2.34 | No fix listed |
| axis 2401 video server | = 3.12 | No fix listed |
| axis 2401 video server | = 3.13 | No fix listed |
| axis 2411 video server | = 3.12 | No fix listed |
| axis 2411 video server | = 3.13 | No fix listed |
| axis 2420 network camera | = 2.12 | No fix listed |
| axis 2420 network camera | = 2.30 | No fix listed |
| axis 2420 network camera | = 2.31 | No fix listed |
| axis 2420 network camera | = 2.32 | No fix listed |
| axis 2420 network camera | = 2.33 | No fix listed |
| axis 2420 network camera | = 2.34 | No fix listed |
| axis 2420 network camera | = 2.40 | No fix listed |
| axis 2420 network camera | = 2.41 | No fix listed |
| axis 2420 video server | = 2.32 | No fix listed |
| axis 2420 video server | = 2.34 | No fix listed |
| axis 2460 network dvr | All versions | No fix listed |
| axis 2460 network dvr | = 3.10 | No fix listed |
| axis 2460 network dvr | = 3.11 | No fix listed |
| axis 2490 serial server | All versions | No fix listed |
| axis 2490 serial server | = 2.11.3 | No fix listed |
| axis 250s video server | All versions | No fix listed |
| axis 250s video server | = 3.03 | No fix listed |
| axis 250s video server | = 3.10 | No fix listed |
| axis storpoint cd | All versions | No fix listed |
References
- 20040822 [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers exploit mailing-list
- 20040831 Axis Network Camera and Video Server Security Advisory mailing-list patch vendor-advisory
- 12353 patch third-party-advisory vendor-advisory
- 1011056 exploit patch vdb-entry
- 9122 vdb-entry
- 11011 patch vdb-entry
- axis-directory-traversal(17079) vdb-entry