PatchTheCVEzeus vulnerabilities
Recent CVEs affecting zeus products. 3 tracked.
zeus has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2010-01-20. Highest priority: CVE-2010-0359 (score 64/100).
- CVE-2010-0363 LOW 2.6 UPGRADE Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin se
- CVE-2010-0362 MEDIUM 5.0 UPGRADE Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for r
- CVE-2010-0359 HIGH 10.0 DOWNGRADE Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial
FAQ
How do I fix zeus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zeus being exploited right now?
None of the tracked zeus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zeus CVE should I patch first?
CVE-2010-0359 currently ranks highest (64/100): Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial.