CVE-2004-1946: Medium severity cherokee cherokee httpd vulnerability
Format string vulnerability in the PRINTERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1946?
CVE-2004-1946 is categorized as a high-severity vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2004-1946?
To fix CVE-2004-1946, update Cherokee Web Server to version 0.4.17 or later, where this vulnerability is addressed.
What software versions are affected by CVE-2004-1946?
Cherokee Web Server versions 0.4.16 and earlier are affected by CVE-2004-1946.
Can CVE-2004-1946 be exploited remotely?
It is unclear whether CVE-2004-1946 can be exploited remotely, as the exploitation primarily involves local users.
What is the impact of CVE-2004-1946?
The impact of CVE-2004-1946 allows local users to execute arbitrary code, potentially compromising the server's integrity.