PatchTheCVEsws vulnerabilities
Recent CVEs affecting sws products. 7 tracked.
sws has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-11-01. Highest priority: CVE-2006-2114 (score 54/100).
- CVE-2006-5636 MEDIUM 5.1 UPGRADE PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows
- CVE-2006-2115 HIGH 7.5 DOWNGRADE Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unsp
- CVE-2006-2114 HIGH 7.5 DOWNGRADE Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request.
- CVE-2002-2370 MEDIUM 5.0 DOWNGRADE SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL r
- CVE-2002-1870 HIGH 7.5 DOWNGRADE Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which
- CVE-2002-1866 MEDIUM 5.0 DOWNGRADE Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which coul
- CVE-2002-1864 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to re
FAQ
How do I fix sws vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sws being exploited right now?
None of the tracked sws CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sws CVE should I patch first?
CVE-2006-2114 currently ranks highest (54/100): Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request..