Description
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
References
- 20011229 Remote Root Hole in Cherokee Webserver mailing-list
- VU#245795 third-party-advisory
- cherokee-http-insecure-privileges(7797) vdb-entry
- 3771 vdb-entry