262 matches found
CVE-2019-20800
CVE-2019-20800 affects Cherokee up to version 1.2.104. A remote attacker can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair (handler_cgi.c) by sending a large number of request headers, as shown by a GET with many Host: 127.0.0.1 headers. Documents confirm the flaw exists acr...
CVE-2019-20799: Out-of-bounds Write
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server...
CVE-2019-20800: Out-of-bounds Write
In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokeehandlercgiaddenvpair in handlercgi.c by sending many request headers, as demonstrated by a GET request with many "Host: 127.0.0.1" headers...
PT-2020-10770 · Cherokee · Cherokee
Name of the Vulnerable Software and Affected Versions: Cherokee versions 1.2.104 and earlier Description: The issue allows remote attackers to trigger an out-of-bounds write in cherokee handler cgi add env pair in handler cgi.c by sending many request headers, as demonstrated by a GET request wit...
PT-2020-10769
Name of the Vulnerable Software and Affected Versions Cherokee versions 1.2.104 and earlier Description The issue is related to multiple memory corruption errors that can be exploited by a remote attacker to destabilize the work of a server. Recommendations For Cherokee versions 1.2.104 and...
CVE-2019-20798: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in handlerserverinfo.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About page in the default configuration of the web server and its administrator panel. The XSS in the administrator panel can be used to reconfigure the server and...
Cherokee Web Server Buffer Overflow Vulnerability
Cherokee Web Server is a web server for highly concurrent web applications. A buffer overflow vulnerability exists in Cherokee Web Server versions 1.2.103 and earlier. The vulnerability originates when a web system or product performs an operation in memory without properly validating data...
CVE-2019-1010218
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
CVE-2019-1010218
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
Buffer overflow
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
CVE-2019-1010218
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
CVE-2019-1010218
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
CVE-2019-1010218
CVE-2019-1010218 affects Cherokee Webserver up to version 1.2.103. The vulnerability is a Buffer Overflow (CWE-120) in the main cherokee command, enabling a crash via overwriting argv[0] to an insane length with execl. The fixed version is listed as no fix yet. Connected sources corroborate the a...
CVE-2019-1010218: Buffer Copy without Checking Size of Input
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 Current stable is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv0 to an insane length with execl. The fixed version is: There's no fix ye...
PT-2019-11515
Name of the Vulnerable Software and Affected Versions: Cherokee Web server versions prior to a fixed version no fixed version available, current stable version is 1.2.103 Description: The issue is related to a buffer overflow, which can cause a crash. The component affected is the main Cherokee...
cherokeecountychamber.com XSS vulnerability
Open Bug Bounty ID: OBB-548305 Description| Value ---|--- Affected Website:| cherokeecountychamber.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mediacast.cherokee.k12.ga.us XSS vulnerability
Open Bug Bounty ID: OBB-114853 Description| Value ---|--- Affected Website:| mediacast.cherokee.k12.ga.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Fedora Update for cherokee FEDORA-2015-6194
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : cherokee (MDVSA-2015:225)
Updated cherokee packages fix security vulnerability : The cherokeevalidatorldapcheck function in validatorldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consider unauthenticated-bind semantics, which allows remote attackers to bypass authentication via an empty...
