CVE-2004-2184

MEDIUM 6.4CVE-2004-2184 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2184 is a MEDIUM (CVSS 6.4) vulnerability affecting yak (digicraft software).
Chance of exploitation in the next 30 days (EPSS): 8.1%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
yak digicraft_software	`= 2.0= 2.0.1= 2.0.2= 2.1.0= 2.1.1= 2.1.2`	No fix yet

Description

Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put.

References

aluigi.altervista.org/adv/yak-adv.txt · Exploit
marc.info
secunia.com/advisories/12849
securitytracker.com/id
osvdb.org/10763
securityfocus.com/archive/1/378533 · Exploit
securityfocus.com/bid/11433 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/17740

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free