← Database

CVE-2004-2426

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.

Affected Platforms

Axis 2420 Network CameraAxis 250S Video ServerAxis 2411 Video ServerAxis 2100 Network CameraAxis Storpoint CdAxis 2420 Video ServerAxis 2490 Serial ServerAxis 2401 Video ServerAxis 2400 Video ServerAxis 2460 Network Dvr

Weakness Type

NVD-CWE-Other

References