Lucene search

[email protected]CVE-2005-1365

HistoryMay 16, 2005 - 4:00 a.m.

CVE-2005-1365

2005-05-1604:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

pico server

pserv

remote attack

url manipulation

command execution

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.2%

JSON

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading “/” (slash) characters and “…” sequences.

CPENameOperatorVersion
pico_server:pico_serverpico servereq3.0
pico_server:pico_serverpico servereq3.2
pico_server:pico_serverpico servereq3.0_beta_3
pico_server:pico_serverpico servereq3.1

CPE	Name	Operator	Version
pico_server:pico_server	pico server	eq	3.0
pico_server:pico_server	pico server	eq	3.2
pico_server:pico_server	pico server	eq	3.0_beta_3
pico_server:pico_server	pico server	eq	3.1

References

marc.info/?l=full-disclosure&m=111625635716712&w=2

sourceforge.net/project/shownotes.php?release_id=327708

www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt

www.securityfocus.com/bid/13642

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.018 Low

EPSS

Percentile

88.2%

JSON

Related for CVE-2005-1365

packetstorm1 cvelist1 securityvulns1