CVE-2009-4587: Cherokee

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word.

Affected products

• Cherokee Cherokee: version 0.5.4 only

Published 2010-01-07. Last modified 2026-06-16.