CVE-2004-1887

CVE-2004-1887 describes a directory traversal vulnerability in Ada Image Server (ImgSvr) version 0.4. This flaw allows unauthenticated remote attackers to view arbitrary directories or download files by appending a null byte (%00) to HTTP requests. While the CVSS score is moderate at 5.0, indicating partial confidentiality impact, its FAUCET Risk Score is high at 86/100. Although not listed in CISA's KEV catalog, exploit code for both arbitrary file download and remote directory listing is publicly available on ExploitDB, yet there is no evidence of active exploitation or significant community discussion.