CVE-2004-2464
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to...
CVE-2004-2464 is a medium vulnerability (CVSS 5.0) in Ada Imgsvr, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. No source names a fixed version.
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
CVE-2004-2464- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
CVE-2004-2464- Updated
- 2026-11-02
EUVDEUVD-2004-2455 No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
EUVD-2004-2455- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwmr-ccvg-gjg3 No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to...
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
GHSA-wwmr-ccvg-gjg3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ada imgsvr 0.4 - Directory Traversal | 2004-04-05 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |
References
securityfocus.com/bid/10048
exchange.xforce.ibmcloud.com/vulnerabilities/16680
osvdb.org/4946
members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt
secunia.com/advisories/11287
nvd.nist.gov/vuln/detail/CVE-2004-2464
github.com/advisories/GHSA-wwmr-ccvg-gjg3