CVE-2004-2464: Medium severity Ada ImgSvr vulnerability
Published Dec 31, 2004
·Updated
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
Affected Software
1 affected component
Ada ImgSvr=0.4
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 20, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2464?
CVE-2004-2464 is considered a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2004-2464?
To fix CVE-2004-2464, upgrade to the latest version of ADA Image Server that is not affected.
3
What software versions are affected by CVE-2004-2464?
CVE-2004-2464 affects ADA Image Server version 0.4 and potentially 0.6.21 and earlier.
4
What types of attacks are possible through CVE-2004-2464?
CVE-2004-2464 allows remote attackers to read arbitrary files or list directories on the server.
5
Is CVE-2004-2464 a zero-day vulnerability?
No, CVE-2004-2464 has been known since 2004 and fixes are available.