Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.

The remote host is affected by the vulnerability described in GLSA-202012-09 (Cherokee: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Cherokee. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Cherokee web server is vulnerable to a flaw in the way that it parses user requests.  Specifically, an attacker can create queries such that unsanitized script code is displayed in user browsers.  An attacker exploiting this flaw would need to be able to convince a user to browse to a malicious URI.  Successful exploitation would result in a possible loss of confidential materials.

The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. A remote attacker can exploit this issue, via a specially crafted request, to execute arbitrary HTML and script code in a user's browser within the security context of the affected site.

ID	Name	Product	Family	Severity
144590	GLSA-202012-09 : Cherokee: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
3508	Cherokee Web Server < 0.5.1 XSS	Nessus Network Monitor	Web Servers	low
10815	Web Server Generic XSS	Nessus	CGI abuses : XSS	medium

Detections

Analytics

CVE-2006-1681

medium

Tenable Plugins

critical

low

medium