CVE-2004-2526: Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a

Unscored severity · published Dec 31, 2004

CVE-2004-2526

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a

–

CVSS

9.3%

EPSS

On KEV

Description

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.

Exploitation

Is it being used?

Exploit prediction (EPSS)9.3% · higher than 95% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Tivoli Directory Server · Ibm

through 4.1; 3.2.2 · source: NVD

Affected product

Tivoli Directory Server

Ibm

All Tivoli Directory Server CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2004-2526

CVE.org

https://www.cve.org/CVERecord?id=CVE-2004-2526

Exploit

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html

Exploit

http://secunia.com/advisories/10347

Exploit

http://securitytracker.com/id?1010834

Patch

http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692

Patch

http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631

Exploit

http://www.oliverkarow.de/research/IDS_directory_traversal.txt