PatchTheCVEcgiforum vulnerabilities and fixes
Recent CVEs affecting cgiforum, with upgrade or downgrade steps. 2 tracked.
cgiforum has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-12-31. Highest priority: CVE-2000-1171 (score 46/100).
- CVE-2002-1902 MEDIUM 5.0 DOWNGRADE CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creatin
- CVE-2000-1171 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbit
FAQ
How do I fix cgiforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cgiforum being exploited right now?
None of the tracked cgiforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cgiforum CVE should I patch first?
CVE-2000-1171 currently ranks highest (46/100): Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbit.