Donato Ferrante has discovered a vulnerability in ADA Image Server (ImgSvr), which can be exploited by malicious people to disclose the content of a directory.

The vulnerability is caused due to an input validation error when parsing HTTP requests. This can be exploited to get a directory listing of the web root and any subdirectories by including a NULL byte ("%00") in a HTTP request to the service (default port 1234/TCP).

Example:
http://[victim]:1234/%00/

The vulnerability has been confirmed in version 0.4 for Windows. Other versions may also be affected.

Solution
Update to version 0.5.
Further details available to Secunia VIM customers

Provided and/or discovered by
Donato Ferrante

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt

Deep Links
Links available to Secunia VIM customers