PatchTheCVEsws simple web server vulnerabilities and fixes
Recent CVEs affecting sws simple web server, with upgrade or downgrade steps. 6 tracked.
Also searched as: swssimplewebserver.
sws simple web server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-05-01. Highest priority: CVE-2006-2114 (score 54/100).
- CVE-2006-2115 HIGH 7.5 DOWNGRADE Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unsp
- CVE-2006-2114 HIGH 7.5 DOWNGRADE Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request.
- CVE-2002-2370 MEDIUM 5.0 DOWNGRADE SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL r
- CVE-2002-1870 HIGH 7.5 DOWNGRADE Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which
- CVE-2002-1866 MEDIUM 5.0 DOWNGRADE Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which coul
- CVE-2002-1864 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to re
FAQ
How do I fix sws simple web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sws simple web server being exploited right now?
None of the tracked sws simple web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sws simple web server CVE should I patch first?
CVE-2006-2114 currently ranks highest (54/100): Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request..