PatchTheCVEan vulnerabilities
Recent CVEs affecting an products. 7 tracked.
an has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-04-03. Highest priority: CVE-2002-1930 (score 54/100).
- CVE-2006-1598 HIGH 7.8 UPGRADE AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scr
- CVE-2005-1087 MEDIUM 6.4 DOWNGRADE CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoo
- CVE-2005-1086 MEDIUM 6.4 DOWNGRADE Buffer overflow in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to execute arbitrary
- CVE-2003-1271 MEDIUM 4.3 DOWNGRADE Cross-site scripting vulnerability (XSS) in AN HTTP 1.41e allows remote attackers to execute arbitrary web scr
- CVE-2003-1270 MEDIUM 5.0 DOWNGRADE AN HTTP 1.41e allows remote attackers to cause a denial of service (borken pipe) via an HTTP request to aux.cg
- CVE-2003-1269 MEDIUM 5.0 DOWNGRADE AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argum
- CVE-2002-1930 HIGH 7.5 DOWNGRADE Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4
FAQ
How do I fix an vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is an being exploited right now?
None of the tracked an CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which an CVE should I patch first?
CVE-2002-1930 currently ranks highest (54/100): Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4.