Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute...

Nginx, Varnish, Cherokee, etc Log Injection

Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Name Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Systems Affected nginx 0.7.64 Varnish 2.0.6 Cherokee 0.99.30...

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Cherokee 0.99.30 and prior are...

Code injection

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

CVE-2009-4587 : Cherokee Web Server 0.5.4 is vulnerable to remote denial of service. Affected component is the HTTP URI parsing; sending a URI containing an MS-DOS reserved word (demonstrated with AUX) can cause the daemon to crash. The NVD/CVE records report a MEDIUM severity with availability i...

CVE-2009-4587: Undefined Security Weakness

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

Directory traversal

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

CVE-2009-3902 affects Cherokee Web Server (versions 0.5.4 and earlier). The vulnerability is a directory traversal allowing remote attackers to read arbitrary files by supplying a /.. sequence in the URL. Reported impact is read access (C:P, I:N, A:N) with network, low complexity and no authentic...

CVE-2009-3902: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

PT-2009-6124 · Cherokee · Cherokee Web Server

Name of the Vulnerable Software and Affected Versions: Cherokee Web Server versions 0.5.4 and earlier Description: A directory traversal issue allows remote attackers to read arbitrary files by including a /.. slash backslash dot dot in the URL. Recommendations: For Cherokee Web Server versions...

Re: Cherokee Web Server 0.5.4 Denial Of Service

This attack should only work on the Windows version of Cherokee Web Server, as it references a DOS-style special device, AUX. This attack can also be launched through a browser as follows: http://www.example.com/AUX...

Cherokee Directory Traversal Vulnerability

Cherokee is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee 0.5.4 and prior versions are vulnerable. OpenVAS...

Cherokee Directory Traversal Vulnerability

Cherokee is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee 0.5.4 and prior versions are vulnerable...

Cherokee 0.5.4 Directory Traversal

Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the application available. Cherokee Web...

Cherokee <= 0.5.4 directory traversal

Exploit for unknown platform in category web applications ===================================== Cherokee = 0.5.4 directory traversal ===================================== Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download:...