PatchTheCVEzeus web server vulnerabilities and fixes
Recent CVEs affecting zeus web server, with upgrade or downgrade steps. 4 tracked.
Also searched as: zeuswebserver.
zeus web server has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-01-20. Highest priority: CVE-2010-0359 (score 64/100).
- CVE-2010-0363 LOW 2.6 UPGRADE Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin se
- CVE-2010-0362 MEDIUM 5.0 UPGRADE Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for r
- CVE-2010-0359 HIGH 10.0 DOWNGRADE Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial
- CVE-2002-1785 LOW 1.9 DOWNGRADE Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 al
FAQ
How do I fix zeus web server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zeus web server being exploited right now?
None of the tracked zeus web server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zeus web server CVE should I patch first?
CVE-2010-0359 currently ranks highest (64/100): Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial.