CVE-2001-1433: High severity Cherokee Cherokee HTTPD vulnerability
Published Dec 29, 2001
·Updated
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
Affected Software
6 affected components
Cherokee Cherokee HTTPD=0.2
Cherokee Cherokee HTTPD=0.1.6
Cherokee Cherokee HTTPD=0.2.6
Cherokee Cherokee HTTPD=0.2.5
Cherokee Cherokee HTTPD=0.1
Cherokee Cherokee HTTPD=0.1.5
Remediation
Patch Available
Event History
Dec 29, 2001
CVE Published
05:00 AM
Mar 24, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1433?
CVE-2001-1433 is considered to be of medium severity due to potential privilege escalation risks.
2
How do I fix CVE-2001-1433?
To fix CVE-2001-1433, upgrade the Cherokee web server to version 0.2.7 or later.
3
Which versions are affected by CVE-2001-1433?
CVE-2001-1433 affects Cherokee web server versions prior to 0.2.7, including 0.1, 0.1.5, 0.1.6, 0.2, 0.2.5, and 0.2.6.
4
What exploitation methods exist for CVE-2001-1433?
Exploitation of CVE-2001-1433 could allow remote attackers to escalate privileges through other vulnerabilities.
5
Is there a workaround for CVE-2001-1433?
There are no specific workarounds available for CVE-2001-1433; upgrading to a secure version is recommended.