CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
86.7%
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
Vendor | Product | Version | CPE |
---|---|---|---|
cherokee | cherokee_httpd | 0.2.6 | cpe:/a:cherokee:cherokee_httpd:0.2.6::: |
cherokee | cherokee_httpd | 0.1.6 | cpe:/a:cherokee:cherokee_httpd:0.1.6::: |
cherokee | cherokee_httpd | 0.2.7 | cpe:/a:cherokee:cherokee_httpd:0.2.7::: |
cherokee | cherokee_httpd | 0.1.5 | cpe:/a:cherokee:cherokee_httpd:0.1.5::: |
cherokee | cherokee_httpd | 0.1 | cpe:/a:cherokee:cherokee_httpd:0.1::: |
cherokee | cherokee_httpd | 0.2.5 | cpe:/a:cherokee:cherokee_httpd:0.2.5::: |
cherokee | cherokee_httpd | 0.4.6 | cpe:/a:cherokee:cherokee_httpd:0.4.6::: |
cherokee | cherokee_httpd | 0.2 | cpe:/a:cherokee:cherokee_httpd:0.2::: |