PatchTheCVEhtdig vulnerabilities
Recent CVEs affecting htdig products. 5 tracked.
htdig has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-11-23. Highest priority: CVE-2005-0085 (score 50/100).
- CVE-2007-6110 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitr
- CVE-2005-0085 MEDIUM 6.8 DOWNGRADE MITIGATE Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execut
- CVE-2002-2010 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remo
- CVE-2001-0834 MEDIUM 6.4 UPGRADE MITIGATE htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to spe
- CVE-2000-0208 MEDIUM 5.0 DOWNGRADE The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the fil
FAQ
How do I fix htdig vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is htdig being exploited right now?
None of the tracked htdig CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which htdig CVE should I patch first?
CVE-2005-0085 currently ranks highest (50/100): Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execut.