nginx HTTP请求源码泄露和拒绝服务漏洞

BugCVE: CVE-2010-2263 BUGTRAQ: 40760 nginx是多平台的HTTP服务器和邮件代理服务器 nginx服务器无法处理交换数据流（ADS），将其处理为普通文件的数据量。攻击者可以使用filename::$data的形式读取并下载Web应用文件的源码；此外如果在HTTP请求中添加了目录遍历序列的话，就可以覆盖内存寄存器，导致拒绝服务。 nginx 0.7.x/0.8.x 厂商补丁： Igor Sysoev ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

CVE-2010-2266

nginx 0.8.36 allows remote attackers to cause a denial of service crash via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence...

CVE-2010-2266

nginx 0.8.36 allows remote attackers to cause a denial of service crash via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence...

CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

Code injection

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

CVE-2010-2263

CVE-2010-2263 is an information-disclosure vulnerability in nginx where, on Windows, an attacker can obtain source code or unparsed files from the web root by appending ::$DATA to the URI. Affected: nginx 0.7.x before 0.7.66 and 0.8.x before 0.8.40. The issue is fixed in 0.7.66 and 0.8.40 release...

CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

CVE-2010-2266

nginx 0.8.36 allows remote attackers to cause a denial of service crash via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence...

CVE-2010-2263

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI...

CVE-2010-2266

nginx 0.8.36 allows remote attackers to cause a denial of service crash via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence...

CVE-2010-2266

Technical details about CVE-2010-2266 are not publicly provided in the connected documents. The available sources only reiterate the initial description; no affected versions, root cause, impact, or remediation are present.

Vulnerabilities with invalid UTF-8 sequence on Windows

Vulnerabilities with invalid UTF-8 sequence on Windows Severity: major CVE-2010-2266 Not vulnerable: 0.8.41+, 0.7.67+ Vulnerable: nginx/Windows 0.7.52-0.8.40...

Vulnerabilities with Windows file default stream

Vulnerabilities with Windows file default stream Severity: major CVE-2010-2263 Not vulnerable: 0.8.40+, 0.7.66+ Vulnerable: nginx/Windows 0.7.52-0.8.39...

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

nginx is prone to remote source-code-disclosure and denial of service vulnerabilities. An attacker can exploit these vulnerabilities to view the source code of files in the context of the server process or cause denial-of- service conditions. nginx 0.8.36 for Windows is vulnerable; other versions...

nginx <= 0.8.36 Remote Source Code Disclosure and DoS Vulnerabilities

nginx is prone to remote source code disclosure and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Nginx &lt;= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability

No description provided by source. TITLE: NGINX ENGINE X SERVER = 0.7.65 STABLE/0.8.39 DEVELOPMENT SOURCE CODE DISCLOSURE/DOWNLOAD VULNERABILITY TESTED OS: WINDOWS XP SP3/ WINDOWS 7 HOME PREMIUM SEVERITY: HIGH IMPACT: READ/DOWNLOAD SOURCE CODE OF WEB APP FILES DISCOVERED DATE: 2010-06-04 FIXED...

nginx File Type Error parsing vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: nginx is a high-performancethe web server, the use is very extensive, which not only is often used as a reverse proxy, it can also be very good support Support PHP to run. 80sec found there is a more serious security issues, by default could lead to a server error of th...

nginx 0.8.36 Source Disclosure and DoS Vulnerabilities

No description provided by source. Issue 1: Remote Source Disclosure - Description - nginx 0.8.36 is a multi platform HTTP server. This vulnerability exists in the latest Windows version of the application available. nginx on Windows is vulnerable to a remote source disclosure attack. - Technical...

Nginx 0.8.36 - Source Disclosure Denial of Service

Nginx 0.8.36 - Source Disclosure Denial of Service Issue 1: Remote Source Disclosure - Description - nginx 0.8.36 is a multi platform HTTP server. This vulnerability exists in the latest Windows version of the application available. nginx on Windows is vulnerable to a remote source disclosure...