6695 matches found
Gentoo Security Advisory GLSA 201206-07 (nginx)
The remote host is missing updates announced in advisory GLSA 201206-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201206-07 (nginx)
The remote host is missing updates announced in advisory GLSA 201206-07. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Mandriva Update for nginx MDVSA-2012:043 (nginx)
Check for the Version of nginx OpenVAS Vulnerability Test Mandriva Update for nginx MDVSA-2012:043 nginx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for nginx MDVSA-2012:043 (nginx)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
nginx < 1.2.x / 1.3.x < 1.2.1 / 1.3.1 Vulnerabilities with Windows directory aliases
Binary data 6529.prm...
SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
Check for the Version of nginx OpenVAS Vulnerability Test $Id: gbsuse201202371.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for nginx openSUSE-SU-2012:0237-1 nginx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...
nginx on Windows Directory Aliases Access Restriction Bypass
The installed version of nginx is 0.x greater than or equal to 0.7.52 or 1.x earlier than 1.2.1 / 1.3.1 and is, therefore, affected by an access restriction bypass vulnerability. By using a request with a specially crafted directory name, such as '/directory::$indexallocation' in place of...
openSUSE: Security Advisory for nginx (openSUSE-SU-2012:0237-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4963
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
CVE-2011-4963
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
Cross site request forgery (csrf)
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
CVE-2011-4963
CVE-2011-4963 affects nginx on Windows: vulnerable in 1.3.x before 1.3.1 and 1.2.x before 1.2.1, where specially crafted requests can bypass access restrictions and reach restricted files using a trailing dot or certain "$index_allocation" sequences. Red Hat/OpenVAS/NVD entries corroborate the Wi...
CVE-2011-4963
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
Vulnerabilities with Windows directory aliases
Vulnerabilities with Windows directory aliases Severity: medium CVE-2011-4963 Not vulnerable: 1.3.1+, 1.2.1+ Vulnerable: nginx/Windows 0.7.52-1.3.0...
CVE-2011-4963
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
Nginx Naxsi模块'nx_extract.py'脚本远程文件泄露漏洞
Naxsi是一款用于nginx的防火墙模块 naxsi-ui/ nxextract.py没有校验用于读取文件的部分输入，允许攻击者利用目录遍历漏洞以WEB权限读取系统任意文件内容 0 Naxsi 0.x 厂商解决方案 Naxsi 0.46-1已经修复此漏洞，建议用户下载使用： http://code.google.com/p/naxsi/...
GLSA-201206-07 : nginx: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201206-07 nginx: User-assisted execution of arbitrary code An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE='nginxmoduleshttpmp4' in order to be affected by this...
nginx: User-assisted execution of arbitrary code
Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE="nginxmoduleshttpmp4" in order to be affected by this vulnerability. Impact A remote...
GLSA-201203-22 : nginx: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201203-22 nginx: Multiple vulnerabilities Multiple vulnerabilities have been found in nginx: The TLS protocol does not properly handle session renegotiation requests CVE-2009-3555. The 'ngxhttpprocessrequestheaders' function in...