ImgSvr is "a personal or corporate Embedded Picture Web Server that let's you efficiently browse digital pictures. Contrary to other gallery systems, imgsvr aimed to be an easy and fully dynamic picture server, no static created thumbnails are created". A vulnerability within the ImgSvr allows remote attackers to access files that reside outside the bounding root directory of the web server.
Credit:
The information has been provided by Tim Brown - Portcullis Computer Security Ltd.
It is possible to pass a value in the template parameter of requests to ImgSvr which causes arbitrary files to be returned from outside of the web root as follows: GET /?template=../../../../../../../../../../etc/passwd HTTP/1.0
Impact:
An attacker could cause access to arbitrary files.
