CVE-2010-2266: Improper Limitation of a Pathname to a Restricted Directory

nginx 0.8.36 allows remote attackers to cause a denial of service crash via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence...