sambar server vulnerabilities and fixes

Recent CVEs affecting sambar server, with upgrade or downgrade steps. 16 tracked.

Also searched as: sambarserver.

sambar server has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2006-12-18. Highest priority: CVE-2000-0509 (score 58/100).

• CVE-2006-6624 MEDIUM 4.0 DOWNGRADE The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (applicatio
• CVE-2005-3506 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier version
• CVE-2004-2565 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versio
• CVE-2004-2564 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other
• CVE-2004-2086 MEDIUM 5.0 DOWNGRADE Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote a
• CVE-2003-1287 MEDIUM 4.6 DOWNGRADE Sambar Server before 6.0 beta 3 allows attackers with physical access to execute arbitrary code via a request
• CVE-2003-1286 HIGH 7.5 DOWNGRADE HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows rem
• CVE-2003-1285 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers
• CVE-2002-0737 MEDIUM 6.4 DOWNGRADE Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or c
• CVE-2002-0128 HIGH 7.5 DOWNGRADE cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possi
• CVE-2001-1292 HIGH 7.5 DOWNGRADE Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary
• CVE-2001-1106 HIGH 7.5 DOWNGRADE The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary
• CVE-2001-1010 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote att
• CVE-2000-0835 MEDIUM 5.0 DOWNGRADE search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary d
• CVE-2000-0509 HIGH 10.0 UPGRADE Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to
• CVE-2000-0213 MEDIUM 5.0 UPGRADE The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attacke

FAQ

How do I fix sambar server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sambar server being exploited right now?

None of the tracked sambar server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sambar server CVE should I patch first?

CVE-2000-0509 currently ranks highest (58/100): Buffer overflows in the finger and whois demonstration scripts in Sambar Server 4.3 allow remote attackers to .

RSS feed for sambar server · ← Back to latest CVEs