PatchTheCVEkazaa vulnerabilities and fixes
Recent CVEs affecting kazaa, with upgrade or downgrade steps. 3 tracked.
kazaa has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2003-07-02. Highest priority: CVE-2002-0315 (score 51/100).
- CVE-2003-0397 HIGH 7.5 DOWNGRADE Buffer overflow in FastTrack (FT) network code, as used in Kazaa 2.0.2 and possibly other versions and product
- CVE-2002-0315 HIGH 7.5 DOWNGRADE DOWNGRADE fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other use
- CVE-2002-0314 MEDIUM 5.0 DOWNGRADE DOWNGRADE fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to caus
FAQ
How do I fix kazaa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kazaa being exploited right now?
None of the tracked kazaa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kazaa CVE should I patch first?
CVE-2002-0315 currently ranks highest (51/100): fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other use.