CVE-2004-2526

Name: CVE-2004-2526
Creator: NVD / NIST
Published: 2004-12-31T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 9.25%

Last modified Jun 16, 2026

CVE-2004-2526 is a vulnerability of currently unknown severity. Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.. EPSS estimates a 9.25% chance of exploitation in the next 30 days.

Description

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.

Metrics

EPSS Probability

9.25%

94.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Ibm	Tivoli Directory Server	<= 4.1
Ibm	Tivoli Directory Server	3.2.2

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.htmlExploit
http://secunia.com/advisories/10347Exploit, Patch, Vendor Advisory
http://securitytracker.com/id?1010834Exploit, Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631Patch, Vendor Advisory
http://www.oliverkarow.de/research/IDS_directory_traversal.txtExploit, Patch, Vendor Advisory
http://www.osvdb.org/8367Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10841Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16850
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.htmlExploit
http://secunia.com/advisories/10347Exploit, Patch, Vendor Advisory
http://securitytracker.com/id?1010834Exploit, Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692Patch, Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631Patch, Vendor Advisory
http://www.oliverkarow.de/research/IDS_directory_traversal.txtExploit, Patch, Vendor Advisory
http://www.osvdb.org/8367Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10841Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16850

Timeline

Published: Dec 31, 2004
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2004-2526?

Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.

How severe is CVE-2004-2526?

Severity scoring for CVE-2004-2526 is pending analysis. The EPSS model estimates a 9.25% probability of exploitation in the next 30 days.

How do I fix CVE-2004-2526?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2004-2526?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST