Back to CVE Browser

CVE-2005-1366

HIGH

7.5

CVSS Severity Score

EPSS Score0.0960%

EPSS Percentile31.51th

PublishedMay 16, 2005

Last ModifiedApr 16, 2026

Vulnerability Description

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.

Affected Platforms (CPE)

📦

Pico Server

Pico Server

= 3.0

📦

Pico Server

Pico Server

= 3.0_beta_3

📦

Pico Server

Pico Server

= 3.1

📦

Pico Server

Pico Server

= 3.2

References & Advisories

🔗 http://marc.info/?l=full-disclosure&m=111625623909003&w=2

🔗 http://sourceforge.net/project/shownotes.php?release_id=327708

🔗 http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt

🔗 http://www.securityfocus.com/bid/13638

🔗 http://marc.info/?l=full-disclosure&m=111625623909003&w=2

🔗 http://sourceforge.net/project/shownotes.php?release_id=327708

🔗 http://www.redteam-pentesting.de/advisories/rt-sa-2005-011.txt

🔗 http://www.securityfocus.com/bid/13638

Related Vulnerabilities

CVE-2005-136510.0

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (sla...

CVE-2002-22957.5

Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and ...

CVE-2005-13677.5

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside o...

CVE-2005-16267.5

Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.