5
CVSSv2

CVE-2004-1887

Published: 31/12/2004 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 510
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Ada Image Server (ImgSvr) 0.4 allows remote malicious users to view directories or download files via an HTTP request with a trailing %00 (null).

Vulnerable Product Search on Vulmon Subscribe to Product

ada imgsvr 0.4

Exploits

source: wwwsecurityfocuscom/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein An attacker may leverage this issue to gain access to arbitrary scripts contained within the server root ...
source: wwwsecurityfocuscom/bid/10026/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the disclose root directory listings This issue has also been reported to allow for listing of directories that reside outside the server root as well An attacker may leverage this issue to gain acc ...