CVE-2004-2464
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to...
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
CVE-2004-2464- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
CVE-2004-2464- Updated
- 2026-11-02
EUVDEUVD-2004-2455 No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
EUVD-2004-2455- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwmr-ccvg-gjg3 No score
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to...
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f"). NOTE: it was later reported that 0.6.21 and earlier is also affected.
- Record
GHSA-wwmr-ccvg-gjg3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ada imgsvr 0.4 - Directory Traversal | 2004-04-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2464 is a medium vulnerability (CVSS 5.0) in Ada Imgsvr, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.51%, the 89th percentile. No source names a fixed version.
References
securityfocus.com/bid/10048
exchange.xforce.ibmcloud.com/vulnerabilities/16680
osvdb.org/4946
members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt
secunia.com/advisories/11287
nvd.nist.gov/vuln/detail/CVE-2004-2464
github.com/advisories/GHSA-wwmr-ccvg-gjg3