Nginx, Varnish, Cherokee, etc Log Injection

Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Name Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Systems Affected nginx 0.7.64 Varnish 2.0.6 Cherokee 0.99.30...

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Cherokee 0.99.30 and prior are...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

Code injection

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service daemon crash via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word...

CVE-2009-4587

CVE-2009-4587 : Cherokee Web Server 0.5.4 is vulnerable to remote denial of service. Affected component is the HTTP URI parsing; sending a URI containing an MS-DOS reserved word (demonstrated with AUX) can cause the daemon to crash. The NVD/CVE records report a MEDIUM severity with availability i...

Directory traversal

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a /.. slash backslash dot dot in the URL...

CVE-2009-3902

CVE-2009-3902 affects Cherokee Web Server (versions 0.5.4 and earlier). The vulnerability is a directory traversal allowing remote attackers to read arbitrary files by supplying a /.. sequence in the URL. Reported impact is read access (C:P, I:N, A:N) with network, low complexity and no authentic...

PT-2009-6124 · Cherokee · Cherokee Web Server

Name of the Vulnerable Software and Affected Versions: Cherokee Web Server versions 0.5.4 and earlier Description: A directory traversal issue allows remote attackers to read arbitrary files by including a /.. slash backslash dot dot in the URL. Recommendations: For Cherokee Web Server versions...

Re: Cherokee Web Server 0.5.4 Denial Of Service

This attack should only work on the Windows version of Cherokee Web Server, as it references a DOS-style special device, AUX. This attack can also be launched through a browser as follows: http://www.example.com/AUX...

Cherokee Directory Traversal Vulnerability

Cherokee is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee 0.5.4 and prior versions are vulnerable. OpenVAS...

Cherokee Directory Traversal Vulnerability

Cherokee is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Cherokee 0.5.4 and prior versions are vulnerable...

Cherokee 0.5.4 - Directory Traversal

Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the application available. Cherokee Web...

Cherokee Web Server Malformed Packet Remote Denial of Service Vulnerability

Cherokee Web Server is prone to a remote denial-of-service vulnerability. An attacker could exploit this issue to crash the affected application, denying service to legitimate users. Cherokee Web Server 0.5.4 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id:...

Cherokee <=0.5.4 directory traversal

No description provided by source. Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the...

Cherokee 0.5.4 Directory Traversal

Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the application available. Cherokee Web...

Cherokee Web Server Malformed Packet Remote Denial of Service Vulnerability

Cherokee Web Server is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...