PatchTheCVE: savant webserverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2005-2859: Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local ushttps://patchthecve.com/cve/CVE-2005-2859.htmlhttps://patchthecve.com/cve/CVE-2005-2859.htmlTue, 16 Jun 2026 22:15:48 +0000MEDIUM 4.6: Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.CVE-2005-0338: Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP reqhttps://patchthecve.com/cve/CVE-2005-0338.htmlhttps://patchthecve.com/cve/CVE-2005-0338.htmlTue, 16 Jun 2026 22:10:56 +0000HIGH 7.5: Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.CVE-2002-2146: cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) https://patchthecve.com/cve/CVE-2002-2146.htmlhttps://patchthecve.com/cve/CVE-2002-2146.htmlTue, 16 Jun 2026 22:00:44 +0000HIGH 7.5: cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.CVE-2002-2145: Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected userhttps://patchthecve.com/cve/CVE-2002-2145.htmlhttps://patchthecve.com/cve/CVE-2002-2145.htmlTue, 16 Jun 2026 22:00:44 +0000HIGH 7.5: Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.CVE-2002-1828: Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request withhttps://patchthecve.com/cve/CVE-2002-1828.htmlhttps://patchthecve.com/cve/CVE-2002-1828.htmlTue, 16 Jun 2026 22:00:07 +0000MEDIUM 5.0: Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.CVE-2002-0099: Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (https://patchthecve.com/cve/CVE-2002-0099.htmlhttps://patchthecve.com/cve/CVE-2002-0099.htmlTue, 16 Jun 2026 21:56:46 +0000MEDIUM 5.0: Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.CVE-2001-0433: Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly exhttps://patchthecve.com/cve/CVE-2001-0433.htmlhttps://patchthecve.com/cve/CVE-2001-0433.htmlTue, 16 Jun 2026 21:54:18 +0000HIGH 7.5: Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.CVE-2000-0641: Savant web server allows remote attackers to execute arbitrary commands via a long GET request.https://patchthecve.com/cve/CVE-2000-0641.htmlhttps://patchthecve.com/cve/CVE-2000-0641.htmlTue, 16 Jun 2026 21:52:10 +0000HIGH 7.5: Savant web server allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-0521: Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not ihttps://patchthecve.com/cve/CVE-2000-0521.htmlhttps://patchthecve.com/cve/CVE-2000-0521.htmlTue, 16 Jun 2026 21:51:54 +0000MEDIUM 5.0: Savant web server allows remote attackers to read source code of CGI scripts via a GET request that does not include the HTTP version number.CVE-2000-0014: Denial of service in Savant web server via a null character in the requested URL.https://patchthecve.com/cve/CVE-2000-0014.htmlhttps://patchthecve.com/cve/CVE-2000-0014.htmlTue, 16 Jun 2026 21:50:49 +0000MEDIUM 5.0: Denial of service in Savant web server via a null character in the requested URL.