nginx Proxy DNS Cache Domain Spoofing Vulnerability

nginx is prone to a vulnerability that may allow attackers to spoof domains because the software fails to properly compare domains when referencing an internal DNS cache. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

nginx HTTP Request Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

nginx WebDAV Multiple Directory Traversal Vulnerabilities

nginx is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

nginx WebDAV目录遍历漏洞

BUGTRAQ ID: 36490 nginx是多平台的HTTP服务器和邮件代理服务器。 nginx可以用作webdav发布服务器，通过webdav用户可以将文件从一个位置拷贝或移动到另一个位置。MOVE或COPY方式需要使用包含有放置文件位置信息的Destination: HTTP头。如果在这个头中使用“../”等字符，攻击者就可以遍历目录树，将文件放置在webroot之外。 nginx默认以nobody用户权限运行，因此这个bug并不严重，因为攻击者仅允许向/tmp/或属于nobody的目录写入文件。此外，攻击还需要webdav的upload权限。 Igor Sysoev nginx...

nginx 0.7.61 Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

nginx HTTP Request Multiple Vulnerabilities

The remote web server is running nginx, a lightweight, high performance web server / reverse proxy and email IMAP/POP3 proxy. The installed version of nginx is affected by multiple vulnerabilities: - A remote buffer overflow attack related to its parsing of complex URIs. - A remote denial of...

nginx 0.7.61 WebDAV directory traversal

Exploit for unknown platform in category remote exploits ======================================= nginx 0.7.61 WebDAV directory traversal ======================================= Title: nginx 0.7.61 WebDAV directory traversal CVE-ID: OSVDB-ID: Author: Kingcope Published: 2009-09-23 Verified: yes vi...

nginx 0.7.61 WebDAV directory traversal

No description provided by source. Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and t...

Nginx 0.7.61 - WebDAV Directory Traversal

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

Nginx 0.7.61 - WebDAV Directory Traversal

Nginx 0.7.61 - WebDAV Directory Traversal Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enable...

nginx - low risk webdav destination bug

Bug Title: nginx webdav copy/move method directory traversal Program: nginx Version: nginx/0.7.61 - other versions may also be affected Website: http://sysoev.ru/nginx/ Severity: Low Date discovered: 23 September 2009 The webdav component has to be enabled and the user has to have permission to u...

Fedora Core 11 FEDORA-2009-9630 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9630. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Gentoo Security Advisory GLSA 200909-18 (nginx)

The remote host is missing updates announced in advisory GLSA 200909-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Core 10 FEDORA-2009-9652 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9652. OpenVAS Vulnerability Test $Id: fcore20099652.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9652 nginx Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Gentoo Security Advisory GLSA 200909-18 (nginx)

The remote host is missing updates announced in advisory GLSA 200909-18. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200909-18 : nginx: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-18 nginx: Remote execution of arbitrary code Chris Ries reported a heap-based buffer underflow in the ngxhttpparsecomplexuri function in http/ngxhttpparse.c when parsing the request URI. Impact : A remote attacker might sen...

Fedora Core 10 FEDORA-2009-9652 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9652. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-9630 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-9630. OpenVAS Vulnerability Test $Id: fcore20099630.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9630 nginx Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

nginx代理DNS缓存域欺骗漏洞

BUGTRAQ ID: 36438 nginx是多平台的HTTP服务器和邮件代理服务器。 nginx对解析过的域名维护一个内部的DNS缓存，但在搜素缓存时，nginx仅检查名称的crc32是否匹配以及短名称是长名称的前缀，但没有检查名称的长度是否相等。如果nginx配置为代理缓存的话，远程攻击者就可以通过DNS投毒攻击欺骗域名，诱骗用户相信所访问的域名为合法。 Igor Sysoev nginx 0.8.x Igor Sysoev nginx 0.7.x Igor Sysoev nginx 0.6.x Igor Sysoev nginx 0.5.x 厂商补丁： Igor Sysoev...

nginx: Remote execution of arbitrary code

Background nginx is a robust, small and high performance HTTP and reverse proxy server. Description Chris Ries reported a heap-based buffer underflow in the ngxhttpparsecomplexuri function in http/ngxhttpparse.c when parsing the request URI. Impact A remote attacker might send a specially crafted...