PatchTheCVEmyserver vulnerabilities and fixes
Recent CVEs affecting myserver, with upgrade or downgrade steps. 9 tracked.
myserver has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2008-11-18. Highest priority: CVE-2007-3365 (score 60/100).
- CVE-2008-5160 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon cras
- CVE-2007-3365 HIGH 7.5 UPGRADE MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows
- CVE-2007-3364 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote
- CVE-2007-2414 HIGH 7.8 UPGRADE MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors.
- CVE-2007-1588 HIGH 7.5 DOWNGRADE server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly d
- CVE-2005-1658 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the paren
- CVE-2004-2517 MEDIUM 5.0 DOWNGRADE myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a
- CVE-2004-2516 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an
- CVE-2002-2240 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via
FAQ
How do I fix myserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is myserver being exploited right now?
None of the tracked myserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which myserver CVE should I patch first?
CVE-2007-3365 currently ranks highest (60/100): MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows .