Cherokee remote command execution

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to...

Cherokee remote command execution

The remote version of Cherokee is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to listen port. SPDX-FileCopyrightText: 2004 David Maciejak Some text...

CVE-2001-1433

The CVE-2001-1433 entry concerns Cherokee web server before 0.2.7. The core issue is twofold: (1) after binding to port 80 it does not properly drop root privileges, creating a risk that a remote attacker could gain privileges, and (2) the remote version is vulnerable to remote command execution ...