Vulnerabilities > CVE-2005-1366 - Remote Source Code Disclosure vulnerability in PServ

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

exploit available

NVD

Published: 2005-05-16

Updated: 2016-10-18

Summary

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.

Part	Description	Count
Application	Pico_Server Pico Server Pico Server 3.0 Pico Server Pico Server 3.0_Beta_3 Pico Server Pico Server 3.1 Pico Server Pico Server 3.2	4

description	PServ 3.2 Remote Source Code Disclosure Vulnerability. CVE-2005-1366. Webapps exploit for cgi platform
id	EDB-ID:25666
last seen	2016-02-03
modified	2005-05-16
published	2005-05-16
reporter	Claus R. F. Overbeck
source	https://www.exploit-db.com/download/25666/
title	PServ 3.2 - Remote Source Code Disclosure Vulnerability

data source	https://packetstormsecurity.com/files/download/39268/rt-sa-2005-011.txt
id	PACKETSTORM:39268
last seen	2016-12-05
published	2005-08-14
reporter	tsyklon.informatik.rwth-aachen.de
source	https://packetstormsecurity.com/files/39268/rt-sa-2005-011.txt.html
title	rt-sa-2005-011.txt