Pico Server
Products
2- 8 CVEs
- 1 CVE
Recent CVEs
9| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-32827 | Med | 0.40 | 6.1 | 0.02 | Aug 16, 2021 | MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine.… | ||
| CVE-2005-1365 | 0.04 | — | 0.12 | May 16, 2005 | Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences. | |||
| CVE-2005-1366 | 0.04 | — | 0.07 | May 16, 2005 | Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL. | |||
| CVE-2002-2295 | 0.04 | — | 0.07 | Dec 31, 2002 | Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an… | |||
| CVE-2001-0202 | 0.03 | — | 0.03 | May 3, 2001 | Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request. | |||
| CVE-2024-22087 | Cri | 0.00 | 9.8 | 0.02 | Jan 5, 2024 | route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution. | ||
| CVE-2005-1952 | 0.00 | — | 0.02 | Jun 16, 2005 | Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count. | |||
| CVE-2005-1953 | 0.00 | — | 0.03 | Jun 11, 2005 | Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. | |||
| CVE-2005-1367 | 0.00 | — | 0.01 | May 16, 2005 | Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root. |
- risk 0.40cvss 6.1epss 0.02
MockServer is open source software which enables easy mocking of any system you integrate with via HTTP or HTTPS. An attacker that can trick a victim into visiting a malicious site while running MockServer locally, will be able to run arbitrary code on the MockServer machine.…
- CVE-2005-1365May 16, 2005risk 0.04cvss —epss 0.12
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
- CVE-2005-1366May 16, 2005risk 0.04cvss —epss 0.07
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.
- CVE-2002-2295Dec 31, 2002risk 0.04cvss —epss 0.07
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an…
- CVE-2001-0202May 3, 2001risk 0.03cvss —epss 0.03
Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
- risk 0.00cvss 9.8epss 0.02
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
- CVE-2005-1952Jun 16, 2005risk 0.00cvss —epss 0.02
Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count.
- CVE-2005-1953Jun 11, 2005risk 0.00cvss —epss 0.03
Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request.
- CVE-2005-1367May 16, 2005risk 0.00cvss —epss 0.01
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.