CVE-2004-1946 - CVE House
Back to Database
Status published Medium CVE-2004-1946

Format string vulnerability in the PRINT_ERROR function in common.c for...

Vulnerability Description

Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument. NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-1946

Credits & Attribution

No credits recorded in the NVD database.

References

More from cherokee

View All →
CVE-2009-4587
Cherokee Web Server 0.5.4 allows remote attackers to cause a...
Medium 5
CVE-2009-3902
Directory traversal vulnerability in Cherokee Web Server 0.5.4 and earlier...
Medium 5
CVE-2006-1681
Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier...
Medium 4.3
CVE-2004-2171
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote...
Medium 4.3
CVE-2004-1097
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17...
Critical 10

Affected Vendor

Affected Software

cherokee httpd
Vulnerable Versions:
0.4.16

Timeline

Official Publish: May 10th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.