CVE-2009-4587: Medium severity cherokee web server vulnerability
Published Jan 7, 2010
·Updated
Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word.
Affected Software
1 affected component
Cherokee Cherokee=0.5.4
Event History
Jan 7, 2010
CVE Published
via MITRE·06:13 PM
Data Sourced
via MITRE·06:13 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4587?
CVE-2009-4587 is considered a denial of service vulnerability.
2
How do I fix CVE-2009-4587?
To mitigate CVE-2009-4587, upgrade the Cherokee Web Server to a version later than 0.5.4.
3
What software is affected by CVE-2009-4587?
CVE-2009-4587 affects Cherokee Web Server version 0.5.4.
4
What type of attacks can be performed using CVE-2009-4587?
Attackers can leverage CVE-2009-4587 to cause a daemon crash of the server.
5
How does the CVE-2009-4587 vulnerability exploit happen?
CVE-2009-4587 is exploited by sending a URI that contains an MS-DOS reserved word.