CVE-2005-1365 Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
HighCVSS 10.0
EPSS 12.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pico server | = 3.0 | No fix listed |
| pico server | = 3.0_beta_3 | No fix listed |
| pico server | = 3.1 | No fix listed |
| pico server | = 3.2 | No fix listed |
References
- 20050516 Advisory: Pico Server (pServ) Remote Command Injection mailing-list
- sourceforge.net
- www.redteam-pentesting.de exploit vendor-advisory
- 13642 vdb-entry