Cherokee Vulnerabilidad

Cronología

Escribe

Web Server9

Producto

Cherokee httpd6
Cherokee Web Server2
Cherokee HTTPD1

Contramedidas

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Explotabilidad

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined7

Vector de acceso

Not Defined0
Physical0
Local1
Adjacent0
Network8

Autenticación

Not Defined0
High0
Low0
None9

La interacción del usuario

Not Defined0
Required2
None7

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤63
≤70
≤83
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤52
≤62
≤71
≤82
≤90
≤101

VulDB

≤10
≤20
≤30
≤40
≤52
≤63
≤70
≤83
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k4
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k8
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (3): HTTPD (1), Web Server (2), httpd (6)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2019-07-227.47.4Cherokee Web Server desbordamiento de búferWeb ServerNot DefinedNot Defined0.001090.00CVE-2019-1010218
2009-10-285.35.0Cherokee httpd directory traversalWeb ServerProof-of-ConceptNot Defined0.021000.00CVE-2009-3902
2006-04-064.33.9Cherokee HTTPD Error Message cross site scriptingWeb ServerProof-of-ConceptOfficial Fix0.010150.00CVE-2006-1681
2005-01-1010.09.5Cherokee httpd cherokee_logger_ncsa_write_string desbordamiento de búferWeb ServerNot DefinedOfficial Fix0.017770.00CVE-2004-1097
2004-04-195.95.9Cherokee httpd common.c print_error desbordamiento de búferWeb ServerNot DefinedNot Defined0.000530.02CVE-2004-1946
2004-01-264.34.1Cherokee httpd Error Page cross site scriptingWeb ServerNot DefinedOfficial Fix0.003530.00CVE-2004-2171
2003-12-265.35.1Cherokee Web Server POST Request connection.c denegación de servicioWeb ServerNot DefinedOfficial Fix0.014440.00CVE-2003-1198
2001-12-297.37.0Cherokee httpd Port Binding escalada de privilegiosWeb ServerNot DefinedOfficial Fix0.016000.00CVE-2001-1433
2001-12-297.57.2Cherokee httpd Web Server directory traversalWeb ServerNot DefinedOfficial Fix0.012780.00CVE-2001-1432

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!