critical10.0Public exploit code
CVE-2005-1365
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." seque…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- pserv 3.2 - Directory Traversal2005-05-16 · remote · linux · Verified
Impact
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pico Server | Pico Server | Versions 3.0, 3.0_beta_3, 3.1, 3.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=111625635716712&w=2
- http://sourceforge.net/project/shownotes.php?release_id=327708
- http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt
- http://www.securityfocus.com/bid/13642
- http://marc.info/?l=full-disclosure&m=111625635716712&w=2
- http://sourceforge.net/project/shownotes.php?release_id=327708
- http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt
- http://www.securityfocus.com/bid/13642