CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2005-1367

HIGH
7.5
CVSS Severity Score
EPSS Score0.0590%
EPSS Percentile34.25th
Published2005年5月16日
Last Modified2026年4月16日

Vulnerability Description

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

Affected Platforms (CPE)

📦
Pico Server

Pico Server

= 3.0
📦
Pico Server

Pico Server

= 3.0_beta_3
📦
Pico Server

Pico Server

= 3.1
📦
Pico Server

Pico Server

= 3.2

References & Advisories

🔗 http://marc.info/?l=full-disclosure&m=111625623909003&w=2
🔗 http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt
🔗 http://marc.info/?l=full-disclosure&m=111625623909003&w=2
🔗 http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt

相關漏洞威脅

CVE-2005-136510.0

Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (sla...

CVE-2002-22957.5

Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and ...

CVE-2005-13667.5

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in ...

CVE-2005-16267.5

Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.