CVEvulnerability

CVE-2004-2426

5.0 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.

Affected configurations

• axis 2100 network camera 2.12 • axis 2100 network camera 2.30 • axis 2100 network camera 2.31 • axis 2100 network camera 2.32 • axis 2100 network camera 2.33 • axis 2100 network camera 2.34 • axis 2100 network camera 2.40 • axis 2100 network camera 2.41 • axis 2110 network camera 2.12 • axis 2110 network camera 2.30 • axis 2110 network camera 2.31 • axis 2110 network camera 2.32 • axis 2110 network camera 2.34 • axis 2110 network camera 2.40 • axis 2110 network camera 2.41 • axis 2120 network camera 2.12 • axis 2120 network camera 2.30 • axis 2120 network camera 2.31 • axis 2120 network camera 2.32 • axis 2120 network camera 2.34 • axis 2120 network camera 2.40 • axis 2120 network camera 2.41 • axis 2130 ptz network camera 2.30 • axis 2130 ptz network camera 2.31 • axis 2130 ptz network camera 2.32 • axis 2130 ptz network camera 2.34 • axis 2130 ptz network camera 2.40 • axis 230 mpeg2 video server 3.11 • axis 2400 video server 1.1 • axis 2400 video server 1.2 • axis 2400 video server 1.10 • axis 2400 video server 1.11 • axis 2400 video server 1.12 • axis 2400 video server 1.15 • axis 2400 video server 2.0 • axis 2400 video server 2.20 • axis 2400 video server 2.30 • axis 2400 video server 2.31 • axis 2400 video server 2.32 • axis 2400 video server 2.33 • axis 2400 video server 2.34 • axis 2400 video server 3.11 • axis 2400 video server 3.12 • axis 2401 video server 1.0 1 • axis 2401 video server 1.15 • axis 2401 video server 2.20 • axis 2401 video server 2.30 • axis 2401 video server 2.31 • axis 2401 video server 2.32 • axis 2401 video server 2.33 • axis 2401 video server 2.34 • axis 2401 video server 3.12 • axis 2401 video server 3.13 • axis 2411 video server 3.12 • axis 2411 video server 3.13 • axis 2420 network camera 2.12 • axis 2420 network camera 2.30 • axis 2420 network camera 2.31 • axis 2420 network camera 2.32 • axis 2420 network camera 2.33 … and 14 more

References