10
CVE-2005-1365
- EPSS 12.03%
- Veröffentlicht 16.05.2005 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:12:55
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pico Server ≫ Pico Server Version3.0
Pico Server ≫ Pico Server Version3.0_beta_3
Pico Server ≫ Pico Server Version3.1
Pico Server ≫ Pico Server Version3.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 12.03% | 0.956 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://marc.info/?l=full-disclosure&m=111625635716712&w=2
http://sourceforge.net/project/shownotes.php?release_id=327708
http://www.redteam-pentesting.de/advisories/rt-sa-2005-010.txt
http://www.securityfocus.com/bid/13642