Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2070
HistoryJul 20, 2013 - 3:37 a.m.

CVE-2013-2070

2013-07-2003:37:25
[email protected]
web.nvd.nist.gov
7

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.152

Percentile

95.9%

JSON

http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.

Affected configurations

Nvd
Node
f5nginxRange1.1.4โ€“1.2.8
OR
f5nginxRange1.3.9โ€“1.4.0
Node
debiandebian_linuxMatch6.0
OR
debiandebian_linuxMatch7.0

Related

nessus 12
openvas 9
fedora 2
cve 2
amazon 1
debiancve 2
ubuntucve 2
cvelist 2
freebsd 1
securityvulns 2
mageia 1
prion 2
gentoo 1
exploitpack 2
altlinux 1
zdt 2
packetstorm 3
canvas 1
seebug 5
nvd 1
debian 1
nginx 2
metasploit 1
myhack58 1
exploitdb 3
nessus
nessus
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
2013-05-29 00:00:00
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
2013-05-08 00:00:00
Nginx < 1.4.1 ngx_http_proxy_module.c Multiple Vulnerabilities
2018-11-05 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-189)
2015-09-08 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: nginx-1.2.9-1.fc18
2013-05-23 12:24:19
[SECURITY] Fedora 19 Update: nginx-1.4.1-1.fc19
2013-05-12 04:53:58
cve
cve
CVE-2013-2070
2013-07-20 03:37:25
CVE-2013-2028
2013-07-20 03:37:20
amazon
amazon
Medium: nginx
2013-05-14 15:35:00
debiancve
debiancve
CVE-2013-2070
2013-07-20 03:37:25
CVE-2013-2028
2013-07-20 03:37:20
ubuntucve
ubuntucve
CVE-2013-2070
2013-07-20 00:00:00
CVE-2013-2028
2013-07-20 00:00:00
cvelist
cvelist
CVE-2013-2070
2013-07-18 01:00:00
CVE-2013-2028
2013-07-18 01:00:00
freebsd
freebsd
nginx -- multiple vulnerabilities
2013-05-07 00:00:00
securityvulns
securityvulns
nginx buffer overflow
2013-07-10 00:00:00
[SECURITY] [DSA 2721-1] nginx security update
2013-07-10 00:00:00
mageia
mageia
Updated nginx package fixes security vulnerability
2013-06-06 16:24:33
prion
prion
Design/Logic Flaw
2013-07-20 03:37:00
Stack overflow
2013-07-20 03:37:00
gentoo
gentoo
nginx: Multiple vulnerabilities
2013-10-06 00:00:00
exploitpack
exploitpack
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
2013-05-07 00:00:00
zdt
zdt
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-24 00:00:00
nginx 1.3.9-1.4.0 DoS PoC
2013-05-18 00:00:00
packetstorm
packetstorm
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-23 00:00:00
Nginx 1.3.9 / 1.4.0 Denial Of Service
2013-05-17 00:00:00
Nginx 1.3.9 / 1.4.0 Buffer Overflow
2013-07-19 00:00:00
canvas
canvas
Immunity Canvas: NGINX_CHUNK
2013-07-20 03:37:00
seebug
seebug
nginx 'ngx_http_parse.c'ๆ ˆ็ผ“ๅ†ฒๅŒบๆบขๅ‡บๆผๆดž
2013-05-17 00:00:00
Nginx proxy_passๆจกๅ—่ฟœ็จ‹ๅฎ‰ๅ…จๆผๆดž(CVE-2013-2070)
2013-05-17 00:00:00
nginx 1.3.9-1.4.0 DoS PoC
2013-05-17 00:00:00
nvd
nvd
CVE-2013-2028
2013-07-20 03:37:20
debian
debian
[SECURITY] [DSA 2721-1] nginx security update
2013-07-07 16:13:34
nginx
nginx
Stack-based buffer overflow with specially crafted request
2013-07-20 03:37:20
Memory disclosure with specially crafted HTTP backend responses
2013-07-20 03:37:25
metasploit
metasploit
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-22 17:52:00
myhack58
myhack58
BROP Attack of the Nginx remote code execution vulnerabilities analysis and use-vulnerability and early warning-the black bar safety net
2017-01-17 00:00:00
exploitdb
exploitdb
Nginx 1.3.9 &lt; 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
Nginx 1.3.9 &lt; 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
2013-05-28 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.152

Percentile

95.9%

JSON
Related for NVD:CVE-2013-2070
nessus12openvas9fedora2cve2amazon1debiancve2ubuntucve2cvelist2freebsd1securityvulns2mageia1prion2gentoo1exploitpack2altlinux1zdt2packetstorm3canvas1seebug5nvd1debian1nginx2metasploit1myhack581exploitdb3