Sign in Get started

← All advisories

Unrated severityNVD Advisory· Published Dec 29, 2001· Updated Apr 16, 2026

CVE-2001-1432

CVE-2001-1432

Description

Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Affected products

7

Cherokee/Cherokee Httpd7 versions
cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.htmlnvdExploit
www.securityfocus.com/bid/3772nvdExploit
www.kb.cert.org/vuls/id/464827nvdUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/7799nvd

News mentions

0

No linked articles in our index yet.