PatchTheCVE04webserver vulnerabilities and fixes
Recent CVEs affecting 04webserver, with upgrade or downgrade steps. 9 tracked.
04webserver has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2006-08-17. Highest priority: CVE-2006-4200 (score 45/100).
- CVE-2006-4200 HIGH 7.5 UPGRADE Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authenticatio
- CVE-2006-4199 MEDIUM 6.8 UPGRADE Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to i
- CVE-2005-1416 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web
- CVE-2004-2662 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or
- CVE-2004-2661 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain s
- CVE-2004-1514 MEDIUM 5.0 DOWNGRADE 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP r
- CVE-2004-1513 MEDIUM 5.0 DOWNGRADE 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attack
- CVE-2004-1512 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers
- CVE-2002-2216 MEDIUM 5.0 DOWNGRADE Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtai
FAQ
How do I fix 04webserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 04webserver being exploited right now?
None of the tracked 04webserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 04webserver CVE should I patch first?
CVE-2006-4200 currently ranks highest (45/100): Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authenticatio.