PatchTheCVEvqserver vulnerabilities and fixes
Recent CVEs affecting vqserver, with upgrade or downgrade steps. 4 tracked.
vqserver has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-08-12. Highest priority: CVE-2000-0766 (score 55/100).
- CVE-2002-0731 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute ar
- CVE-2000-0766 HIGH 7.5 DOWNGRADE Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gai
- CVE-2000-0241 MEDIUM 5.0 DOWNGRADE vqSoft vqServer stores sensitive information such as passwords in cleartext in the server.cfg file, which allo
- CVE-2000-0240 MEDIUM 5.0 DOWNGRADE vqSoft vqServer program allows remote attackers to read arbitrary files via a /........../ in the URL, a varia
FAQ
How do I fix vqserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vqserver being exploited right now?
None of the tracked vqserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vqserver CVE should I patch first?
CVE-2000-0766 currently ranks highest (55/100): Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gai.