Vulnerability in Cherokee Httpd

CVE-2001-1433

Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.

EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.

Affected products

Cherokee Cherokee_httpd — versions 0.1, 0.1.5, 0.1.6
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_VULNWATCH, Exploit)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)