6783 matches found
Heap overflow
Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response...
CVE-2011-4315
CVE-2011-4315 describes a heap-based buffer overflow in nginx’s DNS resolver path (core/ngx_resolver.c) that can be triggered by compression-pointer processing. Affected: nginx versions prior to 1.0.10. Impact stated across sources: remote resolvers may cause a denial of service (daemon crash) an...
CVE-2011-4315
Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response...
CVE-2011-4315
Heap-based buffer overflow in compression-pointer processing in core/ngxresolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service daemon crash or possibly have unspecified other impact via a long response...
[SECURITY] Fedora 15 Update: nginx-1.0.10-1.fc15
Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...
[SECURITY] Fedora 16 Update: nginx-1.0.10-1.fc16
Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...
Fedora 15 : nginx-1.0.10-1.fc15 (2011-16110)
fix for CVE-2011-4315 nginx: heap overflow in ngxresolvercopy Update to latest stable version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 16 : nginx-1.0.10-1.fc16 (2011-16075)
fix for CVE-2011-4315 nginx: heap overflow in ngxresolvercopy Update to latest stable version Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
phpdisk网盘上传解析漏洞
简要描述： phpdisk系统，用的蛮多，这个解析漏洞有点鸡肋，phpdisk版本不是通杀。 详细说明： 近期搞个网盘站发现的一个解析漏洞，phpdisk系统，用的蛮多，这个解析漏洞有点鸡肋，phpdisk版本不是通杀。 因为是PHP程序，所以服务器一定支持PHP，这程序后台限制了php.asp.aspx.php2.等一些脚本上传。但是可以上传1.php;rar.这样的程序，利用IIS6的解析漏洞。我们把PHP马改成1.php;rar，如果改成1.php;.rar就不行了，因为他会自动变名字的。1.php;rar他变名字但是.php;rar不会被变。上传后找路径。 右键电信下载1.然后属...
nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
nginx is prone to a remote heap-based buffer-overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx"...
nginx DNS解析器远程堆缓冲区溢出漏洞
Bugtraq ID: 50710 CVE ID：CVE-2011-4315 nginx是一款高性能的web服务器，使用非常广泛，其不仅经常被用作反向代理，也可以非常好的支持PHP的运行。 当处理DNS应答时"ngxresolvercopy"函数ngxresolver.c存在边界错误，构建特制DNS应答可触发基于堆的缓冲区溢出。 DNS解析器一般用于代理和fastcgi模块，默认不启用。 Igor Sysoev nginx 1.0.9 Igor Sysoev nginx 1.0.8 Igor Sysoev nginx 0.8.40 Igor Sysoev nginx 0.8.36 Igo...
Discuz 1.5 storm WEB path vulnerability-vulnerability warning-the black bar safety net
Test environment: discuz X1. 5+nginx 1.0 漏洞 文件 source/function/functioncore.php that Code: $G'setting''domain''app''default' && $content = pregreplace"/a href="^"+"/e", "rewriteoutput'sitedefault', 0, '".$ G'setting''domain''app''default'.$ port.$ G'siteroot'."', '\\1'", $content; Use code:...
Discuz 1.5 with NGINX secondary analytical proof path BUG-vulnerability warning-the black bar safety net
Author: Sunny small cast Test environment: discuz X1. 5+nginx 1.0 漏洞 文件 source/function/functioncore.php that code: $G'setting''domain''app''default' && $content = pregreplace"/a href="^"+"/e", "rewriteoutput'sitedefault', 0, '".$ G'setting''domain''app''default'.$ port.$ G'siteroot'."',...
nginx 0.8.37 空字节截断导致任意代码执行漏洞
No description provided by source...
Nginx Code Execution with Null Bytes to several hidden points and critical points-vulnerability warning-the black bar safety net
Last night, the Black pot on the microblogging made a foreigner explosion Nginx vulnerability, the beginning and few people pay attention, the ego immediately frame environmental testing to verify that my product is good handy online and tried the two sites also verify this vulnerability, so...
Nginx %0 0 empty bytes to execute arbitrary code(php)vulnerability-vulnerability warning-the black bar safety net
Ngnix in the encounter%0 0 empty bytes when the back-end FastCGI process is inconsistent, resulting in images embedded in the PHP code and then by accessing the xxx. jpg%0 0. php to execute the code Affected versions: nginx 0.5. nginx 0.6. nginx 0.7 = 0.7.65 nginx 0.8 = 0.8.37 In vulnerable...
Nginx %00空字节执行任意代码(php)漏洞
Possible Arbitrary Code Execution with Null Bytes, PHP, and Old Versions of nginx Ngnix在遇到%00空字节时与后端FastCGI处理不一致，导致可以在图片中嵌入PHP代码然后通过访问xxx.jpg%00.php来执行其中的代码 In vulnerable versions of nginx, null bytes are allowed in URIs by default their presence is indicated via a variable named zeroinuri define...
Nginx 0.7.65 Shell Upload
Exploit Title : Nginx Server Configuration hole ; Upload file execute Software link : http://nginx.org/ Version : Confirmed in nginx v0.7.65. And PHP v5.3.2 with Suhosin patch and extension. Tested on : windows 7 Date : 29/07/2011 Author : sysmox.com Website : http://www.sysmox.com Email :...