CVE-2009-3902

CVE-2009-3902 affects Cherokee Web Server (versions 0.5.4 and earlier). The vulnerability is a directory traversal allowing remote attackers to read arbitrary files by supplying a /.. sequence in the URL. Reported impact is read access (C:P, I:N, A:N) with network, low complexity and no authentic...