Ada Imgsvr vulnerabilities

CVE-2004-2464 [MEDIUM] CVE-2004-2464: Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read a Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.

CVE-2007-3714 [MEDIUM] CVE-2007-3714: Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter to the default URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this is probably a different issue than CVE-2004-2464. NOT

CVE-2004-1887 [MEDIUM] CVE-2004-1887: Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an H Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).

CVE-2006-3546 [MEDIUM] CVE-2006-3546: Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463.

CVE-2004-2463 [HIGH] CVE-2004-2463: Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of servic Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request.