Description
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
References
- 20011229 Remote Root Hole in Cherokee Webserver mailing-list
- cherokee-http-directory-traversal(7799) vdb-entry
- 3772 vdb-entry
- VU#464827 third-party-advisory