CVE-2005-1626

Multiple buffer overflows in handlers.c for Pico Server pServ before 3.3 may allow attackers to execute arbitrary code...

EUVD-2005-1370

Malware in sbrugna...

EUVD-2005-1629

Malware in sbrugna...

EUVD-2005-1368

Malware in sbrugna...

EUVD-2005-1369

Malware in sbrugna...

EUVD-2005-1955

Malware in sbrugna...

EUVD-2005-1954

Malware in sbrugna...

CVE-2002-2295

Buffer overflow in Pico Server pServ 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or 2 a long method name in an HTTP request, 3 a long...

CVE-2002-2295

CVE-2002-2295 affects Pico Server (pServ) 2.0 beta 1–beta 5. The issue is a buffer overflow in the HTTP handling path, triggered by: (1) a 1024-byte TCP stream message (off-by-one overflow), (2) long method name, (3) long version number, (4) long User-Agent header, or (5) long file path. This can...

CVE-2002-2295: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Pico Server pServ 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or 2 a long method name in an HTTP request, 3 a long...

rt-sa-2005-012.txt

Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...

rt-sa-2005-011.txt

Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

pservBad.txt

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

pico33.txt

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphaël Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1953

CVE-2005-1953: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Root cause is a heap overflow in the CGI component; exploitation status is not described in the provided documents. No patch/remedi...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

CVE-2005-1953

Heap-based buffer overflow in the CGI extension for Pico Server pServ 3.3 allows remote attackers to execute arbitrary code via a long HTTP request...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1952: Undefined Security Weakness

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...