PatchTheCVEworking resources inc. vulnerabilities
Recent CVEs affecting working resources inc. products. 18 tracked.
working resources inc. has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-05-02. Highest priority: CVE-2002-1973 (score 61/100).
- CVE-2005-0595 HIGH 7.5 DOWNGRADE Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisa
- CVE-2004-2374 MEDIUM 5.0 DOWNGRADE BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for p
- CVE-2004-1727 MEDIUM 5.0 DOWNGRADE BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number
- CVE-2003-0332 HIGH 7.6 UPGRADE The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters
- CVE-2002-2289 MEDIUM 5.0 DOWNGRADE soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive inform
- CVE-2002-2170 HIGH 7.5 DOWNGRADE Working Resources Inc
- CVE-2002-1973 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Fou
- CVE-2002-1685 MEDIUM 4.3 DOWNGRADE Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allo
- CVE-2002-1684 MEDIUM 5.0 DOWNGRADE DOWNGRADE Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and Bad
- CVE-2002-1683 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute
- CVE-2002-1541 HIGH 7.5 DOWNGRADE BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP reque
- CVE-2002-1023 MEDIUM 5.0 DOWNGRADE BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a
- CVE-2002-1022 HIGH 7.5 DOWNGRADE BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote
- CVE-2002-1021 MEDIUM 5.0 DOWNGRADE BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that con
- CVE-2002-0800 MEDIUM 5.0 DOWNGRADE BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' charac
- CVE-2002-0326 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary s
- CVE-2002-0325 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via
- CVE-2001-1140 MEDIUM 5.0 DOWNGRADE BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by app
FAQ
How do I fix working resources inc. vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is working resources inc. being exploited right now?
None of the tracked working resources inc. CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which working resources inc. CVE should I patch first?
CVE-2002-1973 currently ranks highest (61/100): Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Fou.