nweb2fax vulnerabilities and fixes
Recent CVEs affecting nweb2fax, with upgrade or downgrade steps. 2 tracked.
nweb2fax has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2009-04-08. Highest priority: CVE-2008-6669 (score 54/100).
- CVE-2008-6669 HIGH 7.5 UPGRADE viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metachara
- CVE-2008-6668 MEDIUM 5.0 UPGRADE Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbi
FAQ
How do I fix nweb2fax vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nweb2fax being exploited right now?
None of the tracked nweb2fax CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nweb2fax CVE should I patch first?
CVE-2008-6669 currently ranks highest (54/100): viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metachara.