CVE-2003-1386: Axis 2400 Video Server

Medium severity, CVSS 6.4. EPSS: 7.7% chance of exploitation in the next 30 days.

AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file.

Affected products

• Axis 2400 Video Server: version 2.0 only; version 2.20 only; version 2.31 only; version 2.32 only; version 2.33 only
• Axis 2401 Video Server: version 2.20 only; version 2.31 only; version 2.32 only; version 2.33 only

Published 2003-12-31. Last modified 2026-06-16.