PT-2007-4960 · Ada · Ada Image Server

Published 2007-07-11 · Updated 2018-10-15 · CVE-2007-3714

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ada Image Server (ImgSvr) version 0.6.5 Ada Image Server (ImgSvr) versions 0.6.21 and earlier

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the template parameter to the default URI.

Recommendations For Ada Image Server (ImgSvr) version 0.6.5, consider restricting access to the default URI until a patch is available. For Ada Image Server (ImgSvr) versions 0.6.21 and earlier, avoid using the template parameter in the default URI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-3714

Affected Products

Ada Image Server

References · 6

• 🔥 https://exploit-db.com/exploits/30286 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3714 · Security Note
• http://osvdb.org/38083 · Note
• http://secunia.com/advisories/26000 · Note
• http://securityfocus.com/archive/1/485490/100/100/threaded · Note
• http://securityfocus.com/bid/24853 · Note