CVE-2004-2464: Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrar...

Security readout for executives and security teams

ADA Image Server (ImgSvr) can expose files outside its intended image directory when it mishandles encoded path traversal input. For a business, the concern is unauthorized reading of local files or directory listings from an exposed legacy image server. The public data names ImgSvr 0.4 and later reports 0.6.21 and earlier as affected. Exposure is most likely in legacy environments still running ADA Image Server or ImgSvr on reachable web hosts. Modern inventories may miss it because the product is old and the CVE affected metadata is sparse. Treat any internet-facing or partner-facing ImgSvr instance as sensitive until version and access controls are verified. Prioritize if ImgSvr exists on any externally reachable host or handles sensitive local files. This is a legacy product issue, so the main business risk is forgotten infrastructure exposing configuration files, credentials, source, or internal data. If no ImgSvr deployment exists, no action is needed beyond documenting the inventory result. Mitigation focus: Identify and remove or replace ADA Image Server ImgSvr 0.6.21 and earlier.; Check vendor or archived project guidance for any fixed release before upgrading.; Restrict network access to any required ImgSvr instance..

Prepared

Jun 29, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.