Pico Server File Access Vulnerability

Bugtraq ID:	13935
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 11 2005 12:00AM
Updated:	Jun 11 2005 12:00AM
Credit:	Rapha?l Rigo ML <[email protected]>
Vulnerable:	Pico Server Pico Server 3.3
Not Vulnerable:	Pico Server Pico Server 3.4

Pico Server File Access Vulnerability

Pico Server is a small web server written in C.

A vulnerability in Pico Server may allow for remote attackers to view file contents or execute programs outside of the web root directory. The vulnerability appears to be due to a design failure in a feature meant to prevent unauthorized access outside of the web root.

The vulnerability can be exploited to obtain the contents of files outside of the web root directory. It may also be exploited to run commands via the "/cgi-bin/" virtual directory.

Pico Server File Access Vulnerability

There is no exploit code required.

Pico Server File Access Vulnerability

Solution:
The author has released a corrected version (3.4). All users of Pico Server are advised to upgrade.


Pico Server Pico Server 3.3

• Pico Server Pico Server 3.4
  http://pserv.sourceforge.net

Pico Server File Access Vulnerability

References:

• Pico Server (Pico Server)
  
• Multiple vulnerabilities in Pico Server (pServ) v3.3 (Rapha?l Rigo ML )