Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7797
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1413
http://www.securityfocus.com/bid/3771
http://www.kb.cert.org/vuls/id/245795
http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html