PatchTheCVEwebalizer vulnerabilities and fixes
Recent CVEs affecting webalizer, with upgrade or downgrade steps. 2 tracked.
webalizer has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2002-04-22. Highest priority: CVE-2002-0180 (score 49/100).
- CVE-2002-0180 HIGH 7.5 DOWNGRADE Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to e
- CVE-2001-0835 HIGH 7.5 UPGRADE Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers
FAQ
How do I fix webalizer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webalizer being exploited right now?
None of the tracked webalizer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webalizer CVE should I patch first?
CVE-2002-0180 currently ranks highest (49/100): Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to e.