CVE-2006-3546

Patrice Freydiere ImgSvr aka ADA Image Server allows remote attackers to cause a denial of service daemon crash via a long HTTP POST request. NOTE: this might be the same issue as CVE-2004-2463...

CVE-2006-3546

CVE-2006-3546 affects Patrice Freydiere ImgSvr (ADA Image Server). A remote attacker can cause a denial of service (daemon crash) by sending a long HTTP POST request. This entry notes a possible relation to CVE-2004-2463 but provides no additional exploit details beyond the POST-based DoS vector....

CVE-2004-2464

The CVE-2004-2464 entry concerns ADA Image Server (ImgSvr). Affected versions include 0.4 (and later notes indicate 0.6.21 and earlier are affected). The vulnerability is a directory traversal flaw in ImgSvr that allows remote attackers to read arbitrary files or list directories via hex-encoded ...

CVE-2004-2463

CVE-2004-2463 affects ADA Image Server (ImgSvr) 0.4. A buffer overflow in the server allows remote attackers to cause a web server crash (denial of service) or execute arbitrary code via a long GET request. The connected records corroborate the long-GET-triggered overflow as the root issue and th...

CVE-2004-2464

Directory traversal vulnerability in ADA Image Server ImgSvr 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences "%2e%2e%2f%2f". NOTE: it was later reported that 0.6.21 and earlier is also affected...

CVE-2004-2463

Buffer overflow in ADA Image Server ImgSvr 0.4 allows remote attackers to cause a denial of service web server crash or execute arbitrary code via a long GET request...

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

CVE-2004-2463

Buffer overflow in ADA Image Server ImgSvr 0.4 allows remote attackers to cause a denial of service web server crash or execute arbitrary code via a long GET request...

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

CVE-2004-2464

Directory traversal vulnerability in ADA Image Server ImgSvr 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences "%2e%2e%2f%2f". NOTE: it was later reported that 0.6.21 and earlier is also affected...

[NT] ADA Image Server (ImgSvr) Multiple Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ADA Image Server multiple bugs

Directory traversal, buffer overflows, etc...

ada imgsvr 0.4 - Directory Traversal

source: https://www.securityfocus.com/bid/10048/info ImgSvr is prone to an issue that may allow an attacker to view files that reside outside of the server root directory. This issue occurs because the application fails to properly sanitize user-supplied URI data. A successful exploit may allow a...

imgSvr.txt

Donato Ferrante Application: imgSvr http://adaimgsvr.sourceforge.net/ Version: 0.4 Bug: Index viewing Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3. The code ...