Debian DSA-2627-1 : nginx - information leak

Juliano Rizzo and Thai Duong discovered a weakness in the TLS/SSL protocol when using compression. This side channel attack, dubbed'CRIME', allows eavesdroppers to gather information to recover the original plaintext in the protocol. This update to nginx disables SSL compression. %NASLMINLEVEL...

[SECURITY] [DSA 2627-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2627-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 17, 2013 http://www.debian.org/security/faq -...

DSA-2627-1 nginx - information leak

Bulletin has no description...

Debian Security Advisory DSA 2627-1 (nginx - information leak)

Juliano Rizzo and Thai Duong discovered a weakness in the TLS/SSL protocol when using compression. This side channel attack, dubbed CRIME , allows eavesdroppers to gather information to recover the original plaintext in the protocol. This update to nginx disables SSL compression. OpenVAS...

Debian: Security Advisory (DSA-2627-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nginx Security Bypass Vulnerability (Windows)

This host is running nginx and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbnginxsecbypassvulnwin.nasl 7548 2017-10-24 12:06:02Z cfischer $ nginx Security Bypass Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c 2013 Greenbone Networks GmbH,...

nginx Security Bypass Vulnerability - Windows

nginx is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx"; if description...

nginx 中间人攻击漏洞(CVE-2011-4968)

Bugtraq ID:57139 CVE ID:CVE-2011-4968 nginx是一款高性能的web服务器，使用非常广泛，其不仅经常被用作反向代理，也可以非常好的支持PHP的运行 nginx包含的Http代理模块允许通过https与源服务器通信，但是没有正确校验源服务器身份，允许攻击者在代理和源服务器之间进行中间人攻击 0 Igor Sysoev nginx 0.8.40 Igor Sysoev nginx 0.8.36 Igor Sysoev nginx 0.8.35 Igor Sysoev nginx 0.8.33 Igor Sysoev nginx 0.7.66 Igor...

64-bit Debian Linux Rootkit with nginx Doing iFrame Injection - Active Check

Debian Squeeze Linux Rootkit with nginx is prone to iframe injection. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx...

New Linux Rootkit Attacks Internet Users

Security researchers have discovered what appears to be an experimental Linux rootkit designed to infect its highly select victims during a classic drive-by website attack. The malware allows hackers to inject code directly in any infected web page. The new malware, discovered on November 13 of...

Nginx Location NTFS Extended Attributes Security Bypass (CVE-2011-4963)

A design weakness vulnerability has been reported in nginx HTTP Server. The vulnerability is due to an error when handling specially crafted HTTP requests. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP request to the target. Successful exploitation can lea...

RedHat 5.4 under the Web server architecture of the source code to build LNMP environment-vulnerability warning-the black bar safety net

A, RedHat 5.4 under theWeb serverthe architecture of the source code to build LNMP environment As a lightweight HTTP server, Nginx with Apache as compared to the compact and exquisite: in the performance, it takes up very little system resources, can support more concurrent connections, to achiev...

nginx "location" 受限制资源服务漏洞

CVE ID: CVE-2011-4963 nginx是一款使用非常广泛的高性能Web服务器。 nginx允许远程攻击者通过请求内的“.”或某些“$indexallocation”序列，绕过目标访问限制或访问受限文件。 0 Nginx 1.2.x 厂商补丁： Nginx ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://nginx.net/...

IIS 6.0/7.0/7.5 and Nginx, Apache and other Web Service parsing vulnerability summary-vulnerability warning-the black bar safety net

Author:laterain From:90sec +IIS 6.0 Directory resolution:/xx.asp/xx.jpg xx. jpg can be replaced with any text filee.g. xx.txt, the text content for the back door code IIS6. 0 will be xx.jpg parsing of asp files. Suffix resolution:/xx. asp;. jpg /xx.asp:.jpghere the need to capture the modified fi...

CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...

DEBIAN-CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...

CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...

CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...

CVE-2012-3380

Directory traversal vulnerability in naxsi-ui/nxextract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors...