Lucene search

[email protected]NVD:CVE-2004-2426

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2426

2004-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a … (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.

Affected configurations

Nvd

Node

axis2100_network_cameraMatch2.12

axis2100_network_cameraMatch2.30

axis2100_network_cameraMatch2.31

axis2100_network_cameraMatch2.32

axis2100_network_cameraMatch2.33

axis2100_network_cameraMatch2.34

axis2100_network_cameraMatch2.40

axis2100_network_cameraMatch2.41

axis2110_network_cameraMatch2.12

axis2110_network_cameraMatch2.30

axis2110_network_cameraMatch2.31

axis2110_network_cameraMatch2.32

axis2110_network_cameraMatch2.34

axis2110_network_cameraMatch2.40

axis2110_network_cameraMatch2.41

axis2120_network_cameraMatch2.12

axis2120_network_cameraMatch2.30

axis2120_network_cameraMatch2.31

axis2120_network_cameraMatch2.32

axis2120_network_cameraMatch2.34

axis2120_network_cameraMatch2.40

axis2120_network_cameraMatch2.41

axis2130_ptz_network_cameraMatch2.30

axis2130_ptz_network_cameraMatch2.31

axis2130_ptz_network_cameraMatch2.32

axis2130_ptz_network_cameraMatch2.34

axis2130_ptz_network_cameraMatch2.40

axis230_mpeg2_video_serverMatch3.11

axis2400_video_serverMatch1.1

axis2400_video_serverMatch1.2

axis2400_video_serverMatch1.10

axis2400_video_serverMatch1.11

axis2400_video_serverMatch1.12

axis2400_video_serverMatch1.15

axis2400_video_serverMatch2.0

axis2400_video_serverMatch2.20

axis2400_video_serverMatch2.30

axis2400_video_serverMatch2.31

axis2400_video_serverMatch2.32

axis2400_video_serverMatch2.33

axis2400_video_serverMatch2.34

axis2400_video_serverMatch3.11

axis2400_video_serverMatch3.12

axis2401_video_serverMatch1.0_1

axis2401_video_serverMatch1.15

axis2401_video_serverMatch2.20

axis2401_video_serverMatch2.30

axis2401_video_serverMatch2.31

axis2401_video_serverMatch2.32

axis2401_video_serverMatch2.33

axis2401_video_serverMatch2.34

axis2401_video_serverMatch3.12

axis2401_video_serverMatch3.13

axis2411_video_serverMatch3.12

axis2411_video_serverMatch3.13

axis2420_network_cameraMatch2.12

axis2420_network_cameraMatch2.30

axis2420_network_cameraMatch2.31

axis2420_network_cameraMatch2.32

axis2420_network_cameraMatch2.33

axis2420_network_cameraMatch2.34

axis2420_network_cameraMatch2.40

axis2420_network_cameraMatch2.41

axis2420_video_serverMatch2.32

axis2420_video_serverMatch2.34

axis2460_network_dvr

axis2460_network_dvrMatch3.10

axis2460_network_dvrMatch3.11

axis2490_serial_server

axis2490_serial_serverMatch2.11.3

axis250s_video_server

axis250s_video_serverMatch3.03

axis250s_video_serverMatch3.10

axisstorpoint_cd

VendorProductVersionCPE
axis2100_network_camera2.12cpe:2.3:h:axis:2100_network_camera:2.12:*:*:*:*:*:*:*
axis2100_network_camera2.30cpe:2.3:h:axis:2100_network_camera:2.30:*:*:*:*:*:*:*
axis2100_network_camera2.31cpe:2.3:h:axis:2100_network_camera:2.31:*:*:*:*:*:*:*
axis2100_network_camera2.32cpe:2.3:h:axis:2100_network_camera:2.32:*:*:*:*:*:*:*
axis2100_network_camera2.33cpe:2.3:h:axis:2100_network_camera:2.33:*:*:*:*:*:*:*
axis2100_network_camera2.34cpe:2.3:h:axis:2100_network_camera:2.34:*:*:*:*:*:*:*
axis2100_network_camera2.40cpe:2.3:h:axis:2100_network_camera:2.40:*:*:*:*:*:*:*
axis2100_network_camera2.41cpe:2.3:h:axis:2100_network_camera:2.41:*:*:*:*:*:*:*
axis2110_network_camera2.12cpe:2.3:h:axis:2110_network_camera:2.12:*:*:*:*:*:*:*
axis2110_network_camera2.30cpe:2.3:h:axis:2110_network_camera:2.30:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axis	2100_network_camera	2.12	cpe:2.3:h:axis:2100_network_camera:2.12:::::::*
axis	2100_network_camera	2.30	cpe:2.3:h:axis:2100_network_camera:2.30:::::::*
axis	2100_network_camera	2.31	cpe:2.3:h:axis:2100_network_camera:2.31:::::::*
axis	2100_network_camera	2.32	cpe:2.3:h:axis:2100_network_camera:2.32:::::::*
axis	2100_network_camera	2.33	cpe:2.3:h:axis:2100_network_camera:2.33:::::::*
axis	2100_network_camera	2.34	cpe:2.3:h:axis:2100_network_camera:2.34:::::::*
axis	2100_network_camera	2.40	cpe:2.3:h:axis:2100_network_camera:2.40:::::::*
axis	2100_network_camera	2.41	cpe:2.3:h:axis:2100_network_camera:2.41:::::::*
axis	2110_network_camera	2.12	cpe:2.3:h:axis:2110_network_camera:2.12:::::::*
axis	2110_network_camera	2.30	cpe:2.3:h:axis:2110_network_camera:2.30:::::::*

Rows per page:

1-10 of 741

References

archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html

archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html

secunia.com/advisories/12353

securitytracker.com/id?1011056

www.osvdb.org/9122

www.securityfocus.com/bid/11011

exchange.xforce.ibmcloud.com/vulnerabilities/17079

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

Related for NVD:CVE-2004-2426

cve1 cvelist1