Savant Webserver vulnerabilities

CVE-2005-0338 [HIGH] CVE-2005-0338: Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a lon Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.

CVE-2002-2145 [HIGH] CVE-2002-2145: Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password prot Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.

CVE-2002-1828 [MEDIUM] CVE-2002-1828: Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET re Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.

CVE-2002-2146 [HIGH] CVE-2002-2146: cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of servic cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.

CVE-2005-2859 [MEDIUM] CVE-2005-2859: Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allow Savant Web Server stores user credentials in plaintext in the Savant\Users registry key, which allows local users to gain privileges.