CVE-2014-4668

概要

参考情報

• advisories.mageia.org/MGASA-2015-0181.html
• lists.fedoraproject.org/pipermail/package-announce/2015-April/155776.html
• lists.fedoraproject.org/pipermail/package-announce/2015-April/156162.html
• lists.fedoraproject.org/pipermail/package-announce/2015-April/156190.html
• openwall.com/lists/oss-security/2014/06/28/3
• openwall.com/lists/oss-security/2014/06/28/7
• mandriva.com/security/advisories
• securityfocus.com/bid/68249
• cherokee/webserver commit fbda667

cherokee のその他の脆弱性

• CVE-2020-12845高 7.5Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can cras…
• CVE-2019-20800緊急 9.8In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by se…
• CVE-2019-20799高 7.5In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
• CVE-2019-20798高 8.4An XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested URL is improperly displayed on the About pag…
• CVE-2011-2191中 6.8Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentica…