PT-2007-4960 · Ada · Ada Image Server

Publicado 2007-07-11 · Atualizado 2018-10-15 · CVE-2007-3714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ada Image Server (ImgSvr) version 0.6.5 Ada Image Server (ImgSvr) versions 0.6.21 and earlier

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the template parameter to the default URI.

Recommendations For Ada Image Server (ImgSvr) version 0.6.5, consider restricting access to the default URI until a patch is available. For Ada Image Server (ImgSvr) versions 0.6.21 and earlier, avoid using the template parameter in the default URI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-3714

Produtos afetados

Ada Image Server

Referências · 6

• 🔥 https://exploit-db.com/exploits/30286 · Exploit
• http://osvdb.org/38083 · Nota
• http://secunia.com/advisories/26000 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3714 · Nota de Segurança
• http://securityfocus.com/archive/1/485490/100/100/threaded · Nota
• http://securityfocus.com/bid/24853 · Nota