CVE-2003-1386

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-264

Description

AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.

Affected products

Axis 2400 Video Server: 2.0, 2.20, 2.31, 2.32, 2.33
Axis 2401 Video Server: 2.20, 2.31, 2.32, 2.33

References

http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.html
http://archives.neohapsis.com/archives/bugtraq/2003-03/0370.html
http://www.securityfocus.com/bid/6980
http://www.websec.org/adv/axis2400.txt.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/11440
http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.html
http://archives.neohapsis.com/archives/bugtraq/2003-03/0370.html
http://www.securityfocus.com/bid/6980
http://www.websec.org/adv/axis2400.txt.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/11440

Get alerted when CVE-2003-1386 or the next vulnerability affects your stack