Cherokee Luki w zabezpieczeniach

Oś czasu

Rodzaj

Web Server	9

Produkt

Cherokee httpd	6
Cherokee Web Server	2
Cherokee HTTPD	1

Przeciwdziałanie

Official Fix	6
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	3

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	7

Wektor dostępu

Not Defined	0
Physical	0
Local	1
Adjacent	0
Network	8

Uwierzytelnianie

Not Defined	0
High	0
Low	0
None	9

Interakcja z użytkownikiem

Not Defined	0
Required	2
None	7

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	0
≤8	3
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	2
≤6	2
≤7	1
≤8	2
≤9	0
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	3
≤7	0
≤8	3
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	1
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	4
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	8
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (3): HTTPD (1), Web Server (2), httpd (6)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2019-07-22	7.4	7.4	Cherokee Web Server memory corruption	Web Server	Not Defined	Not Defined	0.00109	0.00	CVE-2019-1010218
2009-10-28	5.3	5.0	Cherokee httpd directory traversal	Web Server	Proof-of-Concept	Not Defined	0.02100	0.00	CVE-2009-3902
2006-04-06	4.3	3.9	Cherokee HTTPD Error Message cross site scripting	Web Server	Proof-of-Concept	Official Fix	0.01015	0.00	CVE-2006-1681
2005-01-10	10.0	9.5	Cherokee httpd cherokee_logger_ncsa_write_string memory corruption	Web Server	Not Defined	Official Fix	0.01777	0.00	CVE-2004-1097
2004-04-19	5.9	5.9	Cherokee httpd common.c print_error memory corruption	Web Server	Not Defined	Not Defined	0.00053	0.02	CVE-2004-1946
2004-01-26	4.3	4.1	Cherokee httpd Error Page cross site scripting	Web Server	Not Defined	Official Fix	0.00353	0.00	CVE-2004-2171
2003-12-26	5.3	5.1	Cherokee Web Server POST Request connection.c denial of service	Web Server	Not Defined	Official Fix	0.01444	0.00	CVE-2003-1198
2001-12-29	7.3	7.0	Cherokee httpd Port Binding privilege escalation	Web Server	Not Defined	Official Fix	0.01600	0.00	CVE-2001-1433
2001-12-29	7.5	7.2	Cherokee httpd Web Server directory traversal	Web Server	Not Defined	Official Fix	0.01278	0.00	CVE-2001-1432

◂ PoprzedniPrzeglądKolejny ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!