cherokee cherokee httpd 0.2.7 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in Cherokee Web Server allows remote malicious users to read arbitrary files via a .. (dot dot) in the URL.

Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2 Cherokee Cherokee Httpd 0.2.7 Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5

connection.c in Cherokee web server prior to 0.4.6 allows remote malicious users to cause a denial of service via an HTTP POST request without a Content-Length header field.

Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6 Cherokee Cherokee Httpd 0.2.7 Cherokee Cherokee Httpd 0.4.6 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5 Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2

Cross-site scripting (XSS) vulnerability in Cherokee prior to 0.4.8 allows remote malicious users to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.

Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2 Cherokee Cherokee Httpd 0.2.7 Cherokee Cherokee Httpd 0.4.6 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5 Cherokee Cherokee Httpd 0.4.7 Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6

1 EDB exploit

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and previous versions, when authenticating via auth_pam, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via format s...

Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5 Cherokee Cherokee Httpd 0.4.6 Cherokee Cherokee Httpd 0.4.7 Cherokee Cherokee Httpd 0.4.8 Cherokee Cherokee Httpd 0.2.7 Cherokee Cherokee Httpd 0.4.17 Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6

Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.

Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2 Cherokee Cherokee Httpd 0.4.8 Cherokee Cherokee Httpd 0.4.9 Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6 Cherokee Cherokee Httpd 0.5 Cherokee Cherokee Httpd 0.2.7 Cherokee Cherokee Httpd 0.4.17 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5 Cherokee Cherokee Httpd 0.4.6 Cherokee Cherokee Httpd 0.4.7

Cherokee web server prior to 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote malicious users to gain privileges via other vulnerabilities.

Cherokee Cherokee Httpd 0.1.6 Cherokee Cherokee Httpd 0.2 Cherokee Cherokee Httpd 0.2.5 Cherokee Cherokee Httpd 0.2.6 Cherokee Cherokee Httpd 0.1 Cherokee Cherokee Httpd 0.1.5

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook