CVE-2004-0072: Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary...

Security readout for executives and security teams

CVE-2004-0072 is a directory traversal flaw in Accipiter Direct Server 6.0. A remote attacker could potentially read files outside the intended web directory by abusing encoded path traversal in an HTTP request. The main business risk is unintended disclosure of local files, including configuration or sensitive operational data. Likely exposure is limited to organizations still running Accipiter Direct Server 6.0 or related legacy deployments reachable over HTTP. The bundle does not identify other affected versions or products, so do not expand scope without inventory evidence. Prioritize if the product is internet-facing or stores sensitive local configuration. This is an old vulnerability, so urgency depends on whether the legacy product still exists in the environment. If present, containment and replacement should be planned promptly. Mitigation focus: Identify whether Accipiter Direct Server 6.0 exists in current or archived environments.; Restrict network access to any confirmed instance until vendor guidance is verified.; Check the original vendor or trusted advisories for patches or supported upgrade paths..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.