Yoggie Pico and Pico Pro Backticks - Remote Code Execution

Yoggie Pico and Pico Pro Backticks - Remote Code Execution source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to...

Yoggie Pico Pro security appliance code execution

Unfiltered Web interface shell characters...

Yoggie Pico and Pico Pro Backticks - Remote Code Execution

source: https://www.securityfocus.com/bid/24743/info Yoggie Pico and Pico Pro are prone to a remote code-execution vulnerability because the device fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary code with superuser privileges. A...

[Full-disclosure] Yoggie Pico Pro Remote Code Execution

This vulnerability affects the Yoggie Pico Pro and most certainly the Yoggie Pico, due to them being effectively identical security appliance. They expose a 'ping' function in their web interface for diagnostic purposes, which passes the IP/hostname given directly to ping in the form of 'ping -c ...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Pico Zip 4.01 - Filename Local Buffer Overflow

Pico Zip 4.01 - Filename Local Buffer Overflow !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a bounda...

Pico Zip 4.01 - 'Filename' Local Buffer Overflow

!/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a boundary error within the "zipinfo.dll"...

rt-sa-2005-012.txt

Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...

pservBad.txt

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

rt-sa-2005-011.txt

Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...

pico33.txt

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphaël Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1952

Directory traversal vulnerability in Pico Server pServ 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ slash dot slash before each .. dot dot sequence in the URL, which results in an incorrect directory depth count...

CVE-2005-1953

Heap-based buffer overflow in the CGI extension for Pico Server pServ 3.3 allows remote attackers to execute arbitrary code via a long HTTP request...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

CVE-2005-1953

CVE-2005-1953: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Root cause is a heap overflow in the CGI component; exploitation status is not described in the provided documents. No patch/remedi...

Pico Server web server multiple vulnerabilities

Information leak, directory traversal...

Multiple vulnerabilities in Pico Server (pServ) v3.3

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphal Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server ...

CVE-2005-1953

Heap-based buffer overflow in the CGI extension for Pico Server pServ 3.3 allows remote attackers to execute arbitrary code via a long HTTP request...