CVE-2005-1626

Multiple buffer overflows in handlers.c for Pico Server pServ before 3.3 may allow attackers to execute arbitrary code...

EUVD-2005-1369

Malware in sbrugna...

EUVD-2005-1370

Malware in sbrugna...

EUVD-2005-1629

Malware in sbrugna...

EUVD-2005-1954

Malware in sbrugna...

EUVD-2005-1368

Malware in sbrugna...

EUVD-2005-1955

Malware in sbrugna...

CVE-2002-2295

Buffer overflow in Pico Server pServ 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or 2 a long method name in an HTTP request, 3 a long...

CVE-2002-2295

CVE-2002-2295 affects Pico Server (pServ) 2.0 beta 1–beta 5. The issue is a buffer overflow in the HTTP handling path, triggered by: (1) a 1024-byte TCP stream message (off-by-one overflow), (2) long method name, (3) long version number, (4) long User-Agent header, or (5) long file path. This can...

rt-sa-2005-012.txt

Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...

rt-sa-2005-011.txt

Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

pservBad.txt

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

pico33.txt

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphaël Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1953

Heap-based buffer overflow in the CGI extension for Pico Server pServ 3.3 allows remote attackers to execute arbitrary code via a long HTTP request...

CVE-2005-1953

CVE-2005-1953: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Root cause is a heap overflow in the CGI component; exploitation status is not described in the provided documents. No patch/remedi...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

Multiple vulnerabilities in Pico Server (pServ) v3.3

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphal Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server ...

Pico Server web server multiple vulnerabilities

Information leak, directory traversal...