Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
References
Link | Resource |
---|---|
http://marc.info/?l=full-disclosure&m=111625623909003&w=2 | |
http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt | Exploit Vendor Advisory |
http://marc.info/?l=full-disclosure&m=111625623909003&w=2 | |
http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt | Exploit Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:57
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=full-disclosure&m=111625623909003&w=2 - | |
References | () http://www.redteam-pentesting.de/advisories/rt-sa-2005-012.txt - Exploit, Vendor Advisory |
Information
Published : 2005-05-16 04:00
Updated : 2024-11-20 23:57
NVD link : CVE-2005-1367
Mitre link : CVE-2005-1367
CVE.ORG link : CVE-2005-1367
JSON object : View
Products Affected
pico_server
- pico_server
CWE