CVE-2005-1367

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:*
cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:57

Type Values Removed Values Added
References () http://marc.info/?l=full-disclosure&m=111625623909003&w=2 - () http://marc.info/?l=full-disclosure&m=111625623909003&w=2 -
References () http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt - Exploit, Vendor Advisory () http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt - Exploit, Vendor Advisory

Information

Published : 2005-05-16 04:00

Updated : 2024-11-20 23:57


NVD link : CVE-2005-1367

Mitre link : CVE-2005-1367

CVE.ORG link : CVE-2005-1367


JSON object : View

Products Affected

pico_server

  • pico_server