mbedthis appweb http server vulnerabilities and fixes

Recent CVEs affecting mbedthis appweb http server, with upgrade or downgrade steps. 5 tracked.

Also searched as: mbedthisappwebhttpserver.

mbedthis appweb http server has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-06-04. Highest priority: CVE-2004-2315 (score 42/100).

• CVE-2007-3009 MEDIUM 4.3 DOWNGRADE Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build
• CVE-2007-3008 MEDIUM 4.3 DOWNGRADE Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to r
• CVE-2004-2317 MEDIUM 5.0 DOWNGRADE Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive
• CVE-2004-2315 MEDIUM 5.0 DOWNGRADE Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an e
• CVE-2004-2213 MEDIUM 5.0 DOWNGRADE Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (

FAQ

How do I fix mbedthis appweb http server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mbedthis appweb http server being exploited right now?

None of the tracked mbedthis appweb http server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mbedthis appweb http server CVE should I patch first?

CVE-2004-2315 currently ranks highest (42/100): Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an e.

RSS feed for mbedthis appweb http server · ← Back to latest CVEs