ID de Prueba:	1.3.6.1.4.1.25623.1.0.15621
Categoría:	Gain a shell remotely
Título:	Cherokee directory traversal flaw
Resumen:	The remote version of Cherokee is vulnerable to directory; traversal flaw when appending a '../' sequence to the web request.;; Additionally, this version fails to drop root privileges after it binds; to listen port.
Descripción:	Summary: The remote version of Cherokee is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Vulnerability Impact: Remote attacker can then submit specially crafted web request to browse any file on the server with root privileges. Solution: Upgrade to Cherokee 0.2.8 or newer. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2001-1432 BugTraq ID: 3772 http://www.securityfocus.com/bid/3772 CERT/CC vulnerability note: VU#464827 http://www.kb.cert.org/vuls/id/464827 http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html XForce ISS Database: cherokee-http-directory-traversal(7799) https://exchange.xforce.ibmcloud.com/vulnerabilities/7799
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.