Approved changes feed: RSS · Atom

cpe:2.3:a:cherokee:cherokee_httpd:0.4.16:*:*:*:*:*:*:*

part: a version: 0.4.16 update: *

VendorCherokee (d1e1d1fd-e404-5e93-b000-d2d71bf95ec5)
ProductCherokee Httpd (cf6ce714-af9b-5813-b6b6-5a8aa2cb216f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1946 vulnerable 2026-06-08 04:48:08.100377 Details available
Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.072Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.