PatchTheCVEpico server vulnerabilities
Recent CVEs affecting pico server products. 6 tracked.
pico server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-06-16. Highest priority: CVE-2005-1365 (score 64/100).
- CVE-2005-1953 HIGH 7.5 DOWNGRADE Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute
- CVE-2005-1952 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files a
- CVE-2005-1367 HIGH 7.5 DOWNGRADE Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink
- CVE-2005-1366 HIGH 7.5 DOWNGRADE Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dir
- CVE-2005-1365 HIGH 10.0 DOWNGRADE Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multi
- CVE-2002-2295 HIGH 7.5 DOWNGRADE Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of
FAQ
How do I fix pico server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pico server being exploited right now?
None of the tracked pico server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pico server CVE should I patch first?
CVE-2005-1365 currently ranks highest (64/100): Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multi.