PatchTheCVEsavant webserver vulnerabilities and fixes
Recent CVEs affecting savant webserver, with upgrade or downgrade steps. 9 tracked.
Also searched as: savantwebserver.
savant webserver has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-09-08. Highest priority: CVE-2002-2145 (score 55/100).
- CVE-2005-2859 MEDIUM 4.6 DOWNGRADE Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local us
- CVE-2005-0338 HIGH 7.5 DOWNGRADE Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP req
- CVE-2002-2146 HIGH 7.5 DOWNGRADE cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash)
- CVE-2002-2145 HIGH 7.5 UPGRADE Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user
- CVE-2002-1828 MEDIUM 5.0 DOWNGRADE Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with
- CVE-2002-0099 MEDIUM 5.0 DOWNGRADE Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (
- CVE-2001-0433 HIGH 7.5 DOWNGRADE Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly ex
- CVE-2000-0641 HIGH 7.5 DOWNGRADE Savant web server allows remote attackers to execute arbitrary commands via a long GET request.
- CVE-2000-0521 MEDIUM 5.0 DOWNGRADE Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not i
FAQ
How do I fix savant webserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is savant webserver being exploited right now?
None of the tracked savant webserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which savant webserver CVE should I patch first?
CVE-2002-2145 currently ranks highest (55/100): Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user.