Secunia

RedTeam has reported some vulnerabilities Pico Server, which can be exploited by malicious, local users to gain knowledge of sensitive information, or by malicious people to gain knowledge of potentially sensitive information or compromise a vulnerable system.

1) An input validation error in the CGI-BIN support can be exploited to disclose the contents of files in the "cgi-bin/" directory or execute arbitrary commands on a vulnerable system via directory traversal attacks.

Successful exploitation requires that the application has been compiled with CGI-BIN support.

2) A malicious, local user with permissions to create files in the web root can disclose the contents of arbitrary files with the privileges of Pico Server via symlinks.

Solution
Update to version 3.3 and grant only trusted users permissions to create files in the web root.

Provided and/or discovered by
RedTeam

Original Advisory
RedTeam:
http://tsyklon.informatik.rwth-aachen.de/redteam/advisories/rt-sa-2005-010.txt
http://tsyklon.informatik.rwth-aachen.de/redteam/advisories/rt-sa-2005-011.txt
http://tsyklon.informatik.rwth-aachen.de/redteam/advisories/rt-sa-2005-012.txt

Deep Links
Links available in Customer Area