NetSight
IP …
medium6.4Public exploit code

CVE-2003-1386

AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the s…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.

Affected products

VendorProductAffected versions
Axis2400 Video Server
Versions 2.0, 2.20, 2.31, 2.32, 2.33
Axis2401 Video Server
Versions 2.20, 2.31, 2.32, 2.33

Weakness classification

CWE-264

References