CVE-2004-2464 Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was l...
MediumCVSS 5.0
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ada imgsvr | = 0.4 | No fix listed |
References
- members.lycos.co.uk
- 11287 third-party-advisory vendor-advisory
- 4946 exploit vdb-entry
- 20071224 Double directory traversal in ImgSvr 0.6.21 mailing-list
- 10048 exploit vdb-entry
- imgsvr-dotdot-directory-traversal(16680) vdb-entry