CVE-2004-2526

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html
Exploit
http://secunia.com/advisories/10347
Exploit
Patch
Vendor Advisory
http://securitytracker.com/id?1010834
Exploit
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631
Patch
Vendor Advisory
http://www.oliverkarow.de/research/IDS_directory_traversal.txt
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/8367
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10841
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16850
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html
Exploit
http://secunia.com/advisories/10347
Exploit
Patch
Vendor Advisory
http://securitytracker.com/id?1010834
Exploit
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692
Patch
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631
Patch
Vendor Advisory
http://www.oliverkarow.de/research/IDS_directory_traversal.txt
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/8367
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10841
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16850

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*

Версия до 4.1 (включая)

cpe:2.3:a:ibm:tivoli_directory_server:3.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06211

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-26r4-3m3w-c772

github

почти 4 года назад