CVE-2001-1433

Опубликовано: 29 дек. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html
Exploit
http://www.kb.cert.org/vuls/id/245795
US Government Resource
http://www.securityfocus.com/bid/3771
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/7797
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html
Exploit
http://www.kb.cert.org/vuls/id/245795
US Government Resource
http://www.securityfocus.com/bid/3771
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/7797

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*

cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*

cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*

cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03437

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-gmcm-mq62-cqw9

github

больше 4 лет назад