CVE-2004-2253

CVE-2004-2253 is a directory traversal vulnerability affecting SurgeLDAP 1.0g and earlier, allowing remote attackers to read arbitrary files. By manipulating the 'page' parameter in user.cgi with a '..' sequence, an attacker can access files outside the intended directory. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to information disclosure. While not listed on the KEV catalog or Hot List, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.