CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

CVE-2011-4963

CVE-2011-4963 affects nginx on Windows: vulnerable in 1.3.x before 1.3.1 and 1.2.x before 1.2.1, where specially crafted requests can bypass access restrictions and reach restricted files using a trailing dot or certain "$index_allocation" sequences. Red Hat/OpenVAS/NVD entries corroborate the Wi...

CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

CVE-2011-4963: Undefined Security Weakness

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

PT-2012-2024

Name of the Vulnerable Software and Affected Versions nginx/Windows versions 1.2.x through 1.2.0 and versions 1.3.x through 1.3.0 Description The issue allows remote attackers to bypass intended access restrictions and access restricted files. This can be achieved via a trailing . dot or certain...

Nginx Naxsi模块'nx_extract.py'脚本远程文件泄露漏洞

Naxsi是一款用于nginx的防火墙模块 naxsi-ui/ nxextract.py没有校验用于读取文件的部分输入，允许攻击者利用目录遍历漏洞以WEB权限读取系统任意文件内容 0 Naxsi 0.x 厂商解决方案 Naxsi 0.46-1已经修复此漏洞，建议用户下载使用： http://code.google.com/p/naxsi/...

GLSA-201206-07 : nginx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-07 nginx: User-assisted execution of arbitrary code An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE='nginxmoduleshttpmp4' in order to be affected by this...

nginx: User-assisted execution of arbitrary code

Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE="nginxmoduleshttpmp4" in order to be affected by this vulnerability. Impact A remote...

GLSA-201203-22 : nginx: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201203-22 nginx: Multiple vulnerabilities Multiple vulnerabilities have been found in nginx: The TLS protocol does not properly handle session renegotiation requests CVE-2009-3555. The 'ngxhttpprocessrequestheaders' function in...

nginx 0.6.x,0.7.x,0.8<=0.8.57 文件解析错误

No description provided by source...

Important: nginx

Issue Overview: Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4...

PHP Group Releases New Versions, But Patch Doesn't Fix CVE-2012-1823 Bug

UPDATE–The developers of PHP have released new versions of the scripting language to fix a remotely exploitable vulnerability announced earlier this week that enables an attacker to pass command-line arguments to the PHP binary. The flaw has been in the code for more than eight years and The PHP...

Fedora Update for nginx FEDORA-2012-6371

Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-6371 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for nginx FEDORA-2012-6411

Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-6411 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for nginx FEDORA-2012-6411

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for nginx FEDORA-2012-6371

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PHP-CGI query string parameter vulnerability

Overview PHP-CGI-based setups contain a vulnerability when parsing query string parameters from php files. Description According to PHP's website, "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." When PHP is use...

[SECURITY] Fedora 15 Update: nginx-1.0.15-1.fc15

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

[SECURITY] Fedora 16 Update: nginx-1.0.15-1.fc16

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

Fedora 16 : nginx-1.0.15-1.fc16 (2012-6411)

Update to 1.0.15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...