CVE-2004-2526

IBM Tivoli Directory Server <4.1 - Path Traversal

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by anonymous · textremotewindows
https://www.exploit-db.com/exploits/24345

References (9)

Core 9
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1010834
Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10841
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_osvdb
http://www.osvdb.org/8367
Exploit, Patch, Vendor Advisory x_refsource_misc
http://www.oliverkarow.de/research/IDS_directory_traversal.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16850
Exploit, Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/10347
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631

Scores

EPSS 0.0621
EPSS Percentile 91.0%

Details

Status published
Products (2)
ibm/tivoli_directory_server 3.2.2
ibm/tivoli_directory_server < 4.1
Published Dec 31, 2004
Tracked Since Feb 18, 2026