Nginx < 1.5.7 ngx_parse_http Security Bypass

According to the self-reported version in the Server response header, the installed version of nginx is greater than 0.8.41 but prior to 1.4.4 / 1.5.7. It is, therefore, affected by a security bypass vulnerability in ‘ngx_http_parse.c’ when a file with a space at the end of the URI is requested.

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.