CVE-2005-1365
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
Date published : 2005-05-16
http://www.securityfocus.com/bid/13642
http://sourceforge.net/project/shownotes.php?release_id=327708