Fedora 14 : cherokee-1.2.99-1.fc14 (2011-12687)

Latest 1.2.x upstream release and bugzilla resolving Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 14 Update: cherokee-1.2.99-1.fc14

Cherokee is a very fast, flexible and easy to configure Web Server. It supp orts the widespread technologies nowadays: FastCGI, SCGI, PHP, CGI, TLS and SSL encrypted connections, Virtual hosts, Authentication, on the fly encoding, Apache compatible log files, and much more...

[SECURITY] Fedora 15 Update: cherokee-1.2.99-1.fc15

Cherokee is a very fast, flexible and easy to configure Web Server. It supp orts the widespread technologies nowadays: FastCGI, SCGI, PHP, CGI, TLS and SSL encrypted connections, Virtual hosts, Authentication, on the fly encoding, Apache compatible log files, and much more...

Cherokee URI Directory Traversal Vulnerability and Information Disclosure Vulnerability

Cherokee is prone to a directory-traversal vulnerability and an information- disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting the issues may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee...

Cherokee URI Directory Traversal Vulnerability and Information Disclosure Vulnerability

Cherokee is prone to a directory traversal vulnerability and an information- disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Cherokee Web Server 0.5.3 Multiple Vulnerabilities

Securitylab.ir Application Info: Name: Cherokee Web Server Version: 0.5.3 Download: http://mirror.aarnet.edu.au/pub/cherokee/windows/Cherokee-setup-0.5.3.exe Directory Traversal: http://127.0.0.1/5C../5C../5C../boot.ini20 Remote Source Disclosure: http://127.0.0.1:80/file.html::$DATA...

Cherokee Web Server 0.5.3 Directory Traversal / Source Disclosure

Securitylab.ir Application Info: Name: Cherokee Web Server Version: 0.5.3 Download: http://mirror.aarnet.edu.au/pub/cherokee/windows/Cherokee-setup-0.5.3.exe Directory Traversal: http://127.0.0.1/%5C../%5C../%5C../boot.ini%20 Remote Source Disclosure: http://127.0.0.1:80/file.html::$DATA...

Cherokee Web-server DoS

Crash on DOS special device name...

Cherokee Web Server 0.5.3 Multiple Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: Cherokee Web Server Version: 0.5.3 Download: http://mirror.aarnet.edu.au/pub/cherokee/windows/Cherokee-setup-0.5.3.exe Directory Traversal: http://127.0.0.1/%5C../%5C../%5C../boot.ini%20 Remote Source Disclosure:...

[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Core Security Technologies Advisory 2010.0121

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

Advisory ID Internal CORE-2010-0121 1. Advisory Information Advisory Id: CORE-2010-0121 Advisory URL:https://www.coresecurity.com/core-labs/advisories/filename-pseudonyms-vulnerabilities Date published: 2010-02-05 Date of last update: 2010-02-05 Vendors contacted: Cherokee team, Nginx team,...

CVE-2009-4489

header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

CVE-2009-4489

header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

CVE-2009-4489

CVE-2009-4489 (Cherokee) : Cherokee 0.99.32 and earlier fails to sanitize non‑printable characters in log files, allowing an HTTP request with escape sequences to modify a window title or potentially execute commands/overwrite files. The issue is a log‑escape vulnerability affecting Cherokee and ...

CVE-2009-4489

header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

Cherokee Terminal Escape Sequence in Logs Command Injection Vulnerability

Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Cherokee 0.99.30 and prior are vulnerable. OpenVAS Vulnerability Test $Id: cherokee37715.na...

Cherokee Terminal Escape Sequence in Logs Command Injection Vulnerability

Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection

Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Name Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Systems Affected nginx 0.7.64 Varnish 2.0.6 Cherokee 0.99.30...

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute...