REDHAT-BUG-713304: XSS
Two flaws were reported in Cherokee.
The first (CVE-2011-2191) is that the Cherokee server admin configuration web interface is vulnerable to CSRF. If an admin is logged into the Cherokee admin interface and visits a site which runs a malicious script, Cherokee can be reconfigured to execute arbitrary commands [1]. It is also vulnerable to use the CSRF to produce a persistant XSS [2].
The second (CVE-2011-2090) is that Cherokee seeds srand with a combination of the time and the PID of the admin process, after which rand() is called to generate a random password -- this is unsafe and allows for fairly easy local password guessing by a local user [3].
[1] http://seclists.org/fulldisclosure/2011/Jun/0 [2] http://www.openwall.com/lists/oss-security/2011/06/03/6 [3] http://code.google.com/p/cherokee/issues/detail?id=1212
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-713304?
The severity of REDHAT-BUG-713304 is classified as a medium to high risk due to its potential to allow unauthorized actions on the Cherokee admin interface.
How do I fix REDHAT-BUG-713304?
To fix REDHAT-BUG-713304, it is recommended to update to the latest version of the Cherokee web server or apply relevant security patches provided by the vendor.
What type of vulnerability is REDHAT-BUG-713304?
REDHAT-BUG-713304 involves a Cross-Site Request Forgery (CSRF) flaw in the Cherokee server admin configuration web interface.
Who is affected by REDHAT-BUG-713304?
REDHAT-BUG-713304 affects administrators using the Cherokee web server admin configuration interface that is accessible without sufficient security measures.
Is there a workaround for REDHAT-BUG-713304?
A possible workaround for REDHAT-BUG-713304 includes implementing CSRF tokens or requiring re-authentication for sensitive actions in the admin interface.