CVE Vulnerabilities

CVE-2003-1198

Published: Dec 26, 2003 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.

Affected Software

Name Vendor Start Version End Version
Cherokee_httpd Cherokee 0.1 0.1
Cherokee_httpd Cherokee 0.1.5 0.1.5
Cherokee_httpd Cherokee 0.1.6 0.1.6
Cherokee_httpd Cherokee 0.2 0.2
Cherokee_httpd Cherokee 0.2.5 0.2.5
Cherokee_httpd Cherokee 0.2.6 0.2.6
Cherokee_httpd Cherokee 0.2.7 0.2.7
Cherokee_httpd Cherokee 0.4.6 0.4.6

References