ID CVE-2004-1887
Summary Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
References
Vulnerable Configurations
  • cpe:2.3:a:ada:imgsvr:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:ada:imgsvr:0.4:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid
  • 10026
  • 10027
bugtraq 20040401 Index viewing in imgSvr 0.4
confirm http://sourceforge.net/project/shownotes.php?release_id=230023
misc http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt
secunia 11277
xf imgsvr-obtain-information(15706)
Last major update 11-07-2017 - 01:31
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:31
Back to Top