Lucene search
MitreCVE-2005-1367HistoryMay 16, 2005 - 4:00 a.m.
CVE-2005-1367
2005-05-1604:00:00
mitre
web.nvd.nist.gov
22
pico server
file access
symlink
web security
cve-2005-1367
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
High
EPSS
0.003
Percentile
65.6%
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
Affected configurations
Node
pico_serverpico_serverMatch3.0
ORpico_serverpico_serverMatch3.0_beta_3
ORpico_serverpico_serverMatch3.1
ORpico_serverpico_serverMatch3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pico_server | pico_server | 3.0 | cpe:2.3:a:pico_server:pico_server:3.0:*:*:*:*:*:*:* |
| pico_server | pico_server | 3.0_beta_3 | cpe:2.3:a:pico_server:pico_server:3.0_beta_3:*:*:*:*:*:*:* |
| pico_server | pico_server | 3.1 | cpe:2.3:a:pico_server:pico_server:3.1:*:*:*:*:*:*:* |
| pico_server | pico_server | 3.2 | cpe:2.3:a:pico_server:pico_server:3.2:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2005-1367
2005-05-16 04:00:00
cvelist
cvelist
CVE-2005-1367
2005-05-16 04:00:00
securityvulns
securityvulns
[Full-disclosure] Pico Server (pServ) Local Information Disclosure
2005-05-16 00:00:00
packetstorm
packetstorm
rt-sa-2005-012.txt
2005-08-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
High
EPSS
0.003
Percentile
65.6%
Related for CVE-2005-1367