Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Apr 16, 2026
CVE-2004-1097
CVE-2004-1097
Description
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
Affected products
11cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.4.17:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:cherokee:cherokee_httpd:0.4.8:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.gentoo.org/security/en/glsa/glsa-200411-02.xmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/11574nvdPatchVendor Advisory
- bugs.gentoo.org/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/17934nvd
News mentions
0No linked articles in our index yet.