Vulnerability in Pico Server

CVE-2005-1367

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

EPSS: 0.012 (65.9th percentile) — read the EPSS interpretation.

Affected products

  • Pico_server — versions 3.0, 3.0_beta_3, 3.1
  • N/a — versions n/a

References