PatchTheCVEfrox vulnerabilities and fixes
Recent CVEs affecting frox, with upgrade or downgrade steps. 3 tracked.
frox has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-09-07. Highest priority: CVE-2005-2807 (score 45/100).
- CVE-2005-2808 HIGH 7.5 DOWNGRADE frox 0.7.16 and 0.7.17 does not properly parse certain Deny ACLs, which might allow attackers to bypass intend
- CVE-2005-2807 HIGH 7.2 DOWNGRADE frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, wh
- CVE-2001-0936 HIGH 7.5 DOWNGRADE Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allow
FAQ
How do I fix frox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is frox being exploited right now?
None of the tracked frox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which frox CVE should I patch first?
CVE-2005-2807 currently ranks highest (45/100): frox 0.7.18, when running setuid root, does not properly drop privileges when reading a configuration file, wh.