Lucene search

[email protected]CVE-2004-2426

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2426

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2426

axis network camera

directory traversal

authentication bypass

remote attack

7.7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.8%

JSON

Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a … (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.

CPENameOperatorVersion
axis:2120_network_cameraaxis 2120 network cameraeq2.31
axis:2110_network_cameraaxis 2110 network cameraeq2.32
axis:storpoint_cdaxis storpoint cdeq*
axis:2100_network_cameraaxis 2100 network cameraeq2.12
axis:2400_video_serveraxis 2400 video servereq1.15
axis:2100_network_cameraaxis 2100 network cameraeq2.41
axis:2400_video_serveraxis 2400 video servereq2.20
axis:2411_video_serveraxis 2411 video servereq3.13
axis:2120_network_cameraaxis 2120 network cameraeq2.32
axis:2400_video_serveraxis 2400 video servereq3.12

CPE	Name	Operator	Version
axis:2120_network_camera	axis 2120 network camera	eq	2.31
axis:2110_network_camera	axis 2110 network camera	eq	2.32
axis:storpoint_cd	axis storpoint cd	eq	*
axis:2100_network_camera	axis 2100 network camera	eq	2.12
axis:2400_video_server	axis 2400 video server	eq	1.15
axis:2100_network_camera	axis 2100 network camera	eq	2.41
axis:2400_video_server	axis 2400 video server	eq	2.20
axis:2411_video_server	axis 2411 video server	eq	3.13
axis:2120_network_camera	axis 2120 network camera	eq	2.32
axis:2400_video_server	axis 2400 video server	eq	3.12

Rows per page:

1-10 of 741

References

archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html

archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html

secunia.com/advisories/12353

securitytracker.com/id?1011056

www.osvdb.org/9122

www.securityfocus.com/bid/11011

exchange.xforce.ibmcloud.com/vulnerabilities/17079

7.7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.8%

JSON

Related for CVE-2004-2426

cvelist1