Skip to content
Noroxi

cherokee records

9 published records for vendor cherokee.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    9 records
    • CVE-2004-1097
      42Plan

      Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_p

      CriticalCVSS 10.0No exploitEPSS 5%

      cherokee · cherokee httpdJan 10, 2005

    • CVE-2001-1432
      32Monitor

      Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a ..

      HighCVSS 7.8No exploitEPSS 4%

      cherokee · cherokee httpdDec 29, 2001

    • CVE-2001-1433
      31Monitor

      Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain

      HighCVSS 7.5No exploitEPSS 3%

      cherokee · cherokee httpdDec 29, 2001

    • CVE-2009-4587
      21Monitor

      Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demon

      MediumCVSS 5.0Proof of conceptEPSS 4%

      cherokee · cherokeeJan 7, 2010

    • CVE-2009-3902
      21Monitor

      Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier for Windows allows remote attackers to read arbitrary files via a

      MediumCVSS 5.0Proof of conceptEPSS 3%

      cherokee · cherokee httpdNov 6, 2009

    • CVE-2003-1198
      20Monitor

      connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Con

      MediumCVSS 5.0No exploitEPSS 1%

      cherokee · cherokee httpdDec 26, 2003

    • CVE-2006-1681
      19Monitor

      Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML vi

      MediumCVSS 4.3Proof of conceptEPSS 6%

      cherokee · cherokee httpdApr 10, 2006

    • CVE-2004-2171
      18Monitor

      Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL

      MediumCVSS 4.3Proof of conceptEPSS 3%

      cherokee · cherokee httpdDec 31, 2004

    • CVE-2004-1946
      18Monitor

      Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute

      MediumCVSS 4.6No exploitEPSS 0%

      cherokee · cherokee httpdApr 19, 2004