CVE-2003-1198

Published: Dec 26, 2003Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.

Affected (8)

Products: Cherokee: Cherokee Httpd

Cherokee

1 product

Cherokee Httpd

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cherokee Cherokee Httpd	Version 0.1.5
Cherokee Cherokee Httpd	Version 0.1.6
Cherokee Cherokee Httpd	Version 0.1
Cherokee Cherokee Httpd	Version 0.2.5
Cherokee Cherokee Httpd	Version 0.2.6
Cherokee Cherokee Httpd	Version 0.2.7
Cherokee Cherokee Httpd	Version 0.2
Cherokee Cherokee Httpd	Version 0.4.6