Cherokee

9 CVEs across 2 Cherokee products. Browse Cherokee vulnerabilities, severities, and proof-of-concept exploits.

Cherokee products with known CVEs

ProductCVEs
Cherokee Httpd8
Cherokee1
Cherokee CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-45872010-01-07Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX…
CVE-2009-39022009-11-06Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /\.. (slash backsl…
CVE-2006-16812006-04-11Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed reque…
CVE-2004-10972005-01-10Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote a…
CVE-2004-21712004-12-31Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not prop…
CVE-2004-19462004-04-19Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via…
CVE-2003-11982003-12-26connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header…
CVE-2001-14332001-12-29Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via oth…
CVE-2001-14322001-12-29Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.