5

CVE-2004-2426

Exploit
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a ..  (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Axis ≫ 2100 Network Camera Version 2.12
Axis ≫ 2100 Network Camera Version 2.30
Axis ≫ 2100 Network Camera Version 2.31
Axis ≫ 2100 Network Camera Version 2.32
Axis ≫ 2100 Network Camera Version 2.33
Axis ≫ 2100 Network Camera Version 2.34
Axis ≫ 2100 Network Camera Version 2.40
Axis ≫ 2100 Network Camera Version 2.41
Axis ≫ 2110 Network Camera Version 2.12
Axis ≫ 2110 Network Camera Version 2.30
Axis ≫ 2110 Network Camera Version 2.31
Axis ≫ 2110 Network Camera Version 2.32
Axis ≫ 2110 Network Camera Version 2.34
Axis ≫ 2110 Network Camera Version 2.40
Axis ≫ 2110 Network Camera Version 2.41
Axis ≫ 2120 Network Camera Version 2.12
Axis ≫ 2120 Network Camera Version 2.30
Axis ≫ 2120 Network Camera Version 2.31
Axis ≫ 2120 Network Camera Version 2.32
Axis ≫ 2120 Network Camera Version 2.34
Axis ≫ 2120 Network Camera Version 2.40
Axis ≫ 2120 Network Camera Version 2.41
Axis ≫ 2130 Ptz Network Camera Version 2.30
Axis ≫ 2130 Ptz Network Camera Version 2.31
Axis ≫ 2130 Ptz Network Camera Version 2.32
Axis ≫ 2130 Ptz Network Camera Version 2.34
Axis ≫ 2130 Ptz Network Camera Version 2.40
Axis ≫ 230 Mpeg2 Video Server Version 3.11
Axis ≫ 2400 Video Server Version 1.1
Axis ≫ 2400 Video Server Version 1.2
Axis ≫ 2400 Video Server Version 1.10
Axis ≫ 2400 Video Server Version 1.11
Axis ≫ 2400 Video Server Version 1.12
Axis ≫ 2400 Video Server Version 1.15
Axis ≫ 2400 Video Server Version 2.0
Axis ≫ 2400 Video Server Version 2.20
Axis ≫ 2400 Video Server Version 2.30
Axis ≫ 2400 Video Server Version 2.31
Axis ≫ 2400 Video Server Version 2.32
Axis ≫ 2400 Video Server Version 2.33
Axis ≫ 2400 Video Server Version 2.34
Axis ≫ 2400 Video Server Version 3.11
Axis ≫ 2400 Video Server Version 3.12
Axis ≫ 2401 Video Server Version 1.0_1
Axis ≫ 2401 Video Server Version 1.15
Axis ≫ 2401 Video Server Version 2.20
Axis ≫ 2401 Video Server Version 2.30
Axis ≫ 2401 Video Server Version 2.31
Axis ≫ 2401 Video Server Version 2.32
Axis ≫ 2401 Video Server Version 2.33
Axis ≫ 2401 Video Server Version 2.34
Axis ≫ 2401 Video Server Version 3.12
Axis ≫ 2401 Video Server Version 3.13
Axis ≫ 2411 Video Server Version 3.12
Axis ≫ 2411 Video Server Version 3.13
Axis ≫ 2420 Network Camera Version 2.12
Axis ≫ 2420 Network Camera Version 2.30
Axis ≫ 2420 Network Camera Version 2.31
Axis ≫ 2420 Network Camera Version 2.32
Axis ≫ 2420 Network Camera Version 2.33
Axis ≫ 2420 Network Camera Version 2.34
Axis ≫ 2420 Network Camera Version 2.40
Axis ≫ 2420 Network Camera Version 2.41
Axis ≫ 2420 Video Server Version 2.32
Axis ≫ 2420 Video Server Version 2.34
Axis ≫ 2460 Network Dvr Version 3.10
Axis ≫ 2460 Network Dvr Version 3.11
Axis ≫ 2490 Serial Server Version 2.11.3
Axis ≫ 250s Video Server Version 3.03
Axis ≫ 250s Video Server Version 3.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.19% 0.896
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html
Patch
Vendor Advisory
http://secunia.com/advisories/12353
Patch
Vendor Advisory
http://securitytracker.com/id?1011056
Patch
Exploit
http://www.securityfocus.com/bid/11011
Patch
http://www.osvdb.org/9122
https://exchange.xforce.ibmcloud.com/vulnerabilities/17079