GCVE - cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*

part: a version: 0.2.7 update: *

Vendor	Cherokee (`d1e1d1fd-e404-5e93-b000-d2d71bf95ec5`)
Product	Cherokee Httpd (`cf6ce714-af9b-5813-b6b6-5a8aa2cb216f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-1681`	vulnerable	2026-06-08 04:48:57.813775	Details available Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. Published: 2006-04-10T23:00:00.000Z Updated: 2024-08-07T17:19:49.379Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/430385/100/0/threaded http://www.securityfocus.com/bid/17408 http://secunia.com/advisories/19587 http://www.vupen.com/english/advisories/2006/1292 https://exchange.xforce.ibmcloud.com/vulnerabilities/25698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2171`	vulnerable	2026-06-08 04:48:08.771996	Details available Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page. Published: 2005-07-10T04:00:00.000Z Updated: 2024-08-08T01:15:01.658Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/14936 http://www.securityfocus.com/bid/9496 http://secunia.com/advisories/10701/ http://www.osvdb.org/3707	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1097`	vulnerable	2026-06-08 04:47:52.942665	Details available Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL. Published: 2004-12-01T05:00:00.000Z Updated: 2024-08-08T00:39:00.853Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17934 http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml http://www.securityfocus.com/bid/11574 http://bugs.gentoo.org/show_bug.cgi?id=67667	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1198`	vulnerable	2026-06-08 04:47:23.645106	Details available connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T02:19:45.918Z Open on db.gcve.eu Reference links http://freshmeat.net/redir/cherokee/20646/url_changelog/ChangeLog http://www.securityfocus.com/bid/9345 http://www.osvdb.org/3306 https://exchange.xforce.ibmcloud.com/vulnerabilities/14119 http://secunia.com/advisories/10518	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-1432`	vulnerable	2026-06-08 04:46:19.890018	Details available Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Published: 2005-03-24T05:00:00.000Z Updated: 2024-08-08T04:58:11.658Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html https://exchange.xforce.ibmcloud.com/vulnerabilities/7799 http://www.securityfocus.com/bid/3772 http://www.kb.cert.org/vuls/id/464827	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.