CVE-2019-20798

Description

References

• cherokee/webserver · Exploit
• logicaltrust.net/blog/2019/11/cherokee.html · Exploit
• security.gentoo.org/glsa/202012-09 · Third Party Advisory

cherokee의 다른 취약점

• CVE-2020-12845높음 7.5Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can cras…
• CVE-2019-20800심각 9.8In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee_handler_cgi_add_env_pair in handler_cgi.c by se…
• CVE-2019-20799높음 7.5In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
• CVE-2014-4668보통 6.8The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly conside…
• CVE-2011-2191보통 6.8Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentica…