Lucene search
MitreCVE-2005-1952HistoryJun 16, 2005 - 4:00 a.m.
CVE-2005-1952
2005-06-1604:00:00
mitre
web.nvd.nist.gov
26
cve-2005-1952
pico server
pserv
directory traversal
remote attack
arbitrary files
arbitrary commands
incorrect directory depth count
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.005
Percentile
75.6%
Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each … (dot dot) sequence in the URL, which results in an incorrect directory depth count.
Affected configurations
Node
pico_serverpico_serverMatch3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pico_server | pico_server | 3.3 | cpe:2.3:a:pico_server:pico_server:3.3:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
Low
EPSS
0.005
Percentile
75.6%
Related for CVE-2005-1952