nginx Proxy DNS Cache Domain Spoofing Vulnerability

The 'nginx' program is prone to a vulnerability that may allow attackers to spoof domains because the software fails to properly compare domains when referencing an internal DNS cache. This issue can be exploited when nginx is configured to act as a forward proxy, but this is a nonstandard and...

Nginx Detection (HTTP)

HTTP based detection of Nginx. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100274";...

nginx Proxy DNS Cache Domain Spoofing Vulnerability

nginx is prone to a vulnerability that may allow attackers to spoof domains because the software fails to properly compare domains when referencing an internal DNS cache. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

nginx HTTP Request Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

nginx WebDAV Multiple Directory Traversal Vulnerabilities

The 'nginx' program is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings '../' to overwrite arbitrary files outside the root directory. These issues...

nginx HTTP Request Remote Buffer Overflow Vulnerability

The 'nginx' program is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result i...

nginx WebDAV Multiple Directory Traversal Vulnerabilities

nginx is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

nginx WebDAV目录遍历漏洞

BUGTRAQ ID: 36490 nginx是多平台的HTTP服务器和邮件代理服务器。 nginx可以用作webdav发布服务器，通过webdav用户可以将文件从一个位置拷贝或移动到另一个位置。MOVE或COPY方式需要使用包含有放置文件位置信息的Destination: HTTP头。如果在这个头中使用“../”等字符，攻击者就可以遍历目录树，将文件放置在webroot之外。 nginx默认以nobody用户权限运行，因此这个bug并不严重，因为攻击者仅允许向/tmp/或属于nobody的目录写入文件。此外，攻击还需要webdav的upload权限。 Igor Sysoev nginx...

nginx 0.7.61 Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

nginx HTTP Request Multiple Vulnerabilities

The remote web server is running nginx, a lightweight, high performance web server / reverse proxy and email IMAP/POP3 proxy. The installed version of nginx is affected by multiple vulnerabilities: - A remote buffer overflow attack related to its parsing of complex URIs. - A remote denial of...

nginx - low risk webdav destination bug

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

nginx 0.7.61 WebDAV directory traversal

No description provided by source. Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and t...

nginx 0.7.61 WebDAV directory traversal

Exploit for unknown platform in category remote exploits ======================================= nginx 0.7.61 WebDAV directory traversal ======================================= Title: nginx 0.7.61 WebDAV directory traversal CVE-ID: OSVDB-ID: Author: Kingcope Published: 2009-09-23 Verified: yes vi...

Nginx 0.7.61 - WebDAV Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

Nginx 0.7.61 - WebDAV Directory Traversal

Nginx 0.7.61 - WebDAV Directory Traversal Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enable...

Fedora Core 10 FEDORA-2009-9652 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9652. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-9630 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9630. OpenVAS Vulnerability Test $Id: fcore20099630.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9630 nginx Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Gentoo Security Advisory GLSA 200909-18 (nginx)

The remote host is missing updates announced in advisory GLSA 200909-18. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Core 10 FEDORA-2009-9652 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9652. OpenVAS Vulnerability Test $Id: fcore20099652.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9652 nginx Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

GLSA-200909-18 : nginx: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-18 nginx: Remote execution of arbitrary code Chris Ries reported a heap-based buffer underflow in the ngxhttpparsecomplexuri function in http/ngxhttpparse.c when parsing the request URI. Impact : A remote attacker might sen...