CVE-2004-1887: Medium severity Ada ImgSvr vulnerability
Published Dec 31, 2004
·Updated
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
Affected Software
1 affected component
Ada ImgSvr=0.4
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1887?
CVE-2004-1887 is considered a moderate severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2004-1887?
To fix CVE-2004-1887, it is recommended to upgrade to a patched version of Ada Image Server that addresses this vulnerability.
3
What types of attacks can exploit CVE-2004-1887?
CVE-2004-1887 can be exploited through crafted HTTP requests that include a trailing null byte, allowing directory listing or file downloads.
4
What versions of Ada ImgSvr are affected by CVE-2004-1887?
CVE-2004-1887 specifically affects Ada ImgSvr version 0.4.
5
Is CVE-2004-1887 easy to exploit?
Yes, CVE-2004-1887 is relatively easy to exploit if the vulnerable software is publicly accessible.