CVE-2004-2526

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. dot dot in the Template parameter...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

IBM Directory Server 4.1 Web Admin Gui (ldacgi.exe) XSS Vulnerability

IBM Directory Server 4.1 Web Admin Gui ldacgi.exe XSS Vulnerability ===================================================================== During the audit of 3rd party product, based on IBM Directory Server, i found a cross site scripting vulnerability on IBM's Directory Server 4.1 Web Admin Gui...