Lucene search
K

nginx 0.7.64 writes data to a log file without sanitizing non-printable characters which might allow remote attackers to modify a window's title or possibly execute arbitrary commands or overwrite files via an HTTP request containing an escape sequence for a terminal emulator.

🗓️ 17 Nov 2020 00:00:00Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 4 Views

Nginx 0.7.64 logs non printable characters, enabling remote attackers to modify window titles or execute commands via HTTP escape sequences.

Related
Detection
ReporterTitlePublishedViews
Family
CBLMariner
CVE-2009-4487 affecting package nginx 1.16.1-4
30 Nov 202019:30
cbl_mariner
Circl
CVE-2009-4487
11 Jan 201000:00
circl
CVE
CVE-2009-4487
13 Jan 201020:00
cve
Cvelist
CVE-2009-4487
13 Jan 201020:00
cvelist
Debian CVE
CVE-2009-4487
13 Jan 201020:00
debiancve
EUVD
EUVD-2009-4454
7 Oct 202500:30
euvd
Nginx
An error log data are not sanitized
13 Jan 201020:00
nginx
Tenable Nessus
nginx < 0.7.64 / 0.8.x < 0.8.23 Multiple Vulnerabilities
9 Mar 201800:00
nessus
Tenable Nessus
Linux Distros Unpatched Vulnerability : CVE-2009-4487
24 Aug 202500:00
nessus
NVD
CVE-2009-4487
13 Jan 201020:30
nvd
Rows per page
Vulners
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Nov 2020 00:00Current
7High risk
Vulners AI Score7
CVSS 26.8
EPSS0.017
4