PatchTheCVEacme labs vulnerabilities
Recent CVEs affecting acme labs products. 13 tracked.
acme labs has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-02-02. Highest priority: CVE-2000-0359 (score 58/100).
- CVE-2000-0900 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to rea
- CVE-2007-0664 MEDIUM 5.0 UPGRADE thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout
- CVE-2006-4248 HIGH 7.2 DOWNGRADE thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary
- CVE-2006-1079 HIGH 7.2 DOWNGRADE htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to
- CVE-2006-1078 HIGH 8.4 DOWNGRADE Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apach
- CVE-2005-4162 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inj
- CVE-2005-3124 LOW 2.1 DOWNGRADE syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a
- CVE-2004-2628 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote at
- CVE-2002-1562 MEDIUM 5.0 MITIGATE Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbit
- CVE-2002-0733 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary scr
- CVE-2001-0748 MEDIUM 5.0 DOWNGRADE Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read
- CVE-2001-0463 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files vi
- CVE-2000-0359 HIGH 10.0 DOWNGRADE Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbit
FAQ
How do I fix acme labs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is acme labs being exploited right now?
None of the tracked acme labs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which acme labs CVE should I patch first?
CVE-2000-0359 currently ranks highest (58/100): Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbit.