high7.5
CVE-2001-1433
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via oth…
Impact
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cherokee | Cherokee Httpd | Versions 0.1, 0.1.5, 0.1.6, 0.2, 0.2.5, 0.2.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html
- http://www.kb.cert.org/vuls/id/245795
- http://www.securityfocus.com/bid/3771
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7797
- http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html
- http://www.kb.cert.org/vuls/id/245795
- http://www.securityfocus.com/bid/3771
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7797