CVE-2001-1433: Cherokee Httpd

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.

Affected products

• Cherokee Cherokee Httpd: version 0.1 only; version 0.1.5 only; version 0.1.6 only; version 0.2 only; version 0.2.5 only; version 0.2.6 only

Published 2001-12-29. Last modified 2026-06-16.