CVE

Id
10852  
CVE No.
CVE-2004-2426  
Status
Candidate  
Description
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.  
Phase
Assigned (20050818)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
75730 10852 CVE-2004-2426 FULLDISC:20040822 [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers  View
75731 10852 CVE-2004-2426 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html  View
75732 10852 CVE-2004-2426 FULLDISC:20040831 Axis Network Camera and Video Server Security Advisory  View
75733 10852 CVE-2004-2426 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html  View
75734 10852 CVE-2004-2426 BID:11011  View
75735 10852 CVE-2004-2426 URL:http://www.securityfocus.com/bid/11011  View
75736 10852 CVE-2004-2426 OSVDB:9122  View
75737 10852 CVE-2004-2426 URL:http://www.osvdb.org/9122  View
75738 10852 CVE-2004-2426 SECTRACK:1011056  View
75739 10852 CVE-2004-2426 URL:http://securitytracker.com/id?1011056  View
75740 10852 CVE-2004-2426 SECUNIA:12353  View
75741 10852 CVE-2004-2426 URL:http://secunia.com/advisories/12353  View
75742 10852 CVE-2004-2426 XF:axis-directory-traversal(17079)  View

Related JVN