Description (CNA)
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html
- http://www.kb.cert.org/vuls/id/245795
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7797
- http://www.securityfocus.com/bid/3771
ADP enrichment
No English description supplied.