CVE-2007-3714: Medium severity Ada ImgSvr vulnerability

Published Jul 11, 2007

Updated

Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this is probably a different issue than CVE-2004-2464. NOTE: it was later reported that 0.6.21 and earlier is also affected.

Affected Software

1 affected component

Ada ImgSvr=0.6.5

Event History

Jul 11, 2007

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3714?

CVE-2007-3714 is classified as a medium severity vulnerability that allows remote file access.

How do I fix CVE-2007-3714?

To fix CVE-2007-3714, upgrade to a patched version of Ada Image Server that does not allow directory traversal.

What type of vulnerability is CVE-2007-3714?

CVE-2007-3714 is a directory traversal vulnerability that permits unauthorized file access.

Which version of Ada Image Server is affected by CVE-2007-3714?

CVE-2007-3714 affects Ada Image Server version 0.6.5.

Can CVE-2007-3714 lead to data exposure?

Yes, CVE-2007-3714 can lead to data exposure by allowing attackers to read arbitrary files on the server.