SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)

Check for the Version of nginx OpenVAS Vulnerability Test $Id: gbsuse201202371.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for nginx openSUSE-SU-2012:0237-1 nginx Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

nginx on Windows Directory Aliases Access Restriction Bypass

The installed version of nginx is 0.x greater than or equal to 0.7.52 or 1.x earlier than 1.2.1 / 1.3.1 and is, therefore, affected by an access restriction bypass vulnerability. By using a request with a specially crafted directory name, such as '/directory::$indexallocation' in place of...

openSUSE: Security Advisory for nginx (openSUSE-SU-2012:0237-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

Cross site request forgery (csrf)

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

CVE-2011-4963

CVE-2011-4963 affects nginx on Windows: vulnerable in 1.3.x before 1.3.1 and 1.2.x before 1.2.1, where specially crafted requests can bypass access restrictions and reach restricted files using a trailing dot or certain "$index_allocation" sequences. Red Hat/OpenVAS/NVD entries corroborate the Wi...

Vulnerabilities with Windows directory aliases

Vulnerabilities with Windows directory aliases Severity: medium CVE-2011-4963 Not vulnerable: 1.3.1+, 1.2.1+ Vulnerable: nginx/Windows 0.7.52-1.3.0...

CVE-2011-4963

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...

Nginx Naxsi模块'nx_extract.py'脚本远程文件泄露漏洞

Naxsi是一款用于nginx的防火墙模块 naxsi-ui/ nxextract.py没有校验用于读取文件的部分输入，允许攻击者利用目录遍历漏洞以WEB权限读取系统任意文件内容 0 Naxsi 0.x 厂商解决方案 Naxsi 0.46-1已经修复此漏洞，建议用户下载使用： http://code.google.com/p/naxsi/...

GLSA-201206-07 : nginx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201206-07 nginx: User-assisted execution of arbitrary code An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE='nginxmoduleshttpmp4' in order to be affected by this...

nginx: User-assisted execution of arbitrary code

Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description An error in ngxhttpmp4module.c could cause a buffer overflow. NOTE: nginx must have been emerged with USE="nginxmoduleshttpmp4" in order to be affected by this vulnerability. Impact A remote...

GLSA-201203-22 : nginx: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201203-22 nginx: Multiple vulnerabilities Multiple vulnerabilities have been found in nginx: The TLS protocol does not properly handle session renegotiation requests CVE-2009-3555. The 'ngxhttpprocessrequestheaders' function in...

nginx 0.6.x,0.7.x,0.8<=0.8.57 文件解析错误

No description provided by source...

Important: nginx

Issue Overview: Buffer overflow in ngxhttpmp4module.c in the ngxhttpmp4module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service memory overwrite or possibly execute arbitrary code via a crafted MP4...

PHP Group Releases New Versions, But Patch Doesn't Fix CVE-2012-1823 Bug

UPDATE–The developers of PHP have released new versions of the scripting language to fix a remotely exploitable vulnerability announced earlier this week that enables an attacker to pass command-line arguments to the PHP binary. The flaw has been in the code for more than eight years and The PHP...

Fedora Update for nginx FEDORA-2012-6411

Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-6411 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for nginx FEDORA-2012-6371

Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2012-6371 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for nginx FEDORA-2012-6411

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...