Pi3 Pi3Web vulnerabilities

CVE-2003-0276 [MEDIUM] CVE-2003-0276: Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and pos Buffer overflow in Pi3Web 2.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GET request with a large number of / characters.

CVE-2002-0142 [HIGH] CVE-2002-0142: CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denia CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.

CVE-2001-0302 [MEDIUM] CVE-2001-0302: Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.

CVE-2003-1032 [MEDIUM] CVE-2003-1032: Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow.

CVE-2002-0433 [MEDIUM] CVE-2002-0433: Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" ( Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.

CVE-2001-0303 [MEDIUM] CVE-2001-0303: tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of th tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file.