Ada Image Server Requests Handling Directory Traversal Vulnerabilities


Description   Multiple vulnerabilities have been identified in Ada Image Server (ImgSvr), which could be exploited by attackers to bypass security restrictions and disclose sensitive information. These issues are caused by input validation errors when processing a specially crafted HTTP request or "template" parameter, which could be exploited to conduct directory traversal attacks and disclose the contents of arbitrary files.
     
Vulnerable Products   Vulnerable Software:
Ada Image Server (ImgSvr) version 0.6.21 and prior
     
Solution  
     
CVE  
     
References   http://aluigi.altervista.org/adv/imgsvr-adv.txt
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Misc : Directory traversal - parameter starting with ../
3.2.0
Directory traversal using ..\..
3.2.0
Directory traversal
3.2.0
     


 
 
 
 
 Risk level 
Moderate 

 Vulnerability First Public Report Date 
2007-12-26 

 Target Type 
Server 

 Possible exploit 
Local & Remote