CVE-2005-1953

Heap-based buffer overflow in the CGI extension for Pico Server pServ 3.3 allows remote attackers to execute arbitrary code via a long HTTP request...

CVE-2005-1626

The CVE-2005-1626 entry affects Pico Server (pServ) prior to version 3.3, with multiple overflow issues in handlers.c that may allow an attacker to execute arbitrary code. Root cause: buffer overflows in a core request/handler module. Documented impact is arbitrary code execution with network acc...

CVE-2005-1626

Multiple buffer overflows in handlers.c for Pico Server pServ before 3.3 may allow attackers to execute arbitrary code...

CVE-2005-1626

Multiple buffer overflows in handlers.c for Pico Server pServ before 3.3 may allow attackers to execute arbitrary code...

CVE-2005-1367

Pico Server pServ 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root...

CVE-2005-1366

Pico Server pServ 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL...

CVE-2005-1367

Pico Server (pServ) before version 3.3 contains a local information disclosure vulnerability: pServ follows symlinks without validating that the link target remains inside the webroot, allowing a local user to read arbitrary files with pServ’s permissions (e.g., /etc/shadow). The issue stems from...

CVE-2005-1366

Pico Server pServ 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL...

CVE-2005-1365

Pico Server pServ 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" slash characters and ".." sequences...

CVE-2005-1367

Pico Server pServ 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root...

CVE-2005-1365

Pico Server pServ 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" slash characters and ".." sequences...

CVE-2005-1365

Pico Server (pServ)

CVE-2005-1366

Pico Server (pServ) up to version 3.2 is affected by an information-disclosure flaw that lets remote attackers obtain the source code of CGI scripts. The vulnerability arises from a flawed CGI-bin path check: requesting URLs like somedir/../cgi-bin can cause the server to return the CGI source in...

[Full-disclosure] Pico Server (pServ) Local Information Disclosure

Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...

[Full-disclosure] Pico Server (pServ) Remote Command Injection

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably too...

[Full-disclosure] Pico Server (pServ) Information Disclosure Of CGI Sources

Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably t...

CVE-2002-2295

Buffer overflow in Pico Server pServ 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or 2 a long method name in an HTTP request, 3 a long...