CVE-2004-2526 Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.
MediumCVSS 5.0
EPSS 9.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli directory server | <= 4.1 | No fix listed |
| ibm tivoli directory server | = 3.2.2 | No fix listed |
References
- 20040802 IBM Directory Server - ldacgi.exe exploit mailing-list
- 10347 exploit patch third-party-advisory vendor-advisory
- 1010834 exploit patch vdb-entry vendor-advisory
- IR52692 patch vendor-advisory
- IR53631 patch vendor-advisory
- www.oliverkarow.de exploit patch vendor-advisory
- 8367 exploit patch vdb-entry vendor-advisory
- 10841 vdb-entry vendor-advisory
- tivoli-directory-directory-traversal(16850) vdb-entry