CVE-2009-4587

MEDIO 5.0CVE-2009-4587 · Published 07/01/2010 · updated 16/06/2026

En resumen

CVE-2009-4587 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a cherokee (cherokee).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.1%, mayor que el 90.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
cherokee cherokee	`= 0.5.4`	No fix yet

Description

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word.

References

securityfocus.com/archive/1/507456/100/0/threaded
securityfocus.com/archive/1/507651/100/0/thread
securityfocus.com/bid/36814
securitytracker.com/id
xc0re.wordpress.com/2009/10/25/cherokee-web-server-0-5-4-denial-of-service · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/53957

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free