Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection

Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Name Nginx, Varnish, Cherokee, thttpd, mini-httpd, WEBrick, Orion, AOLserver, Yaws and Boa log escape sequence injection Systems Affected nginx 0.7.64 Varnish 2.0.6 Cherokee 0.99.30...

Nginx 0.7.64 - Terminal Escape Sequence in Logs Command Injection

Nginx 0.7.64 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37711/info The 'nginx' program is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in log files. Attackers can exploit this issue to...

Nginx 0.7.64 - Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37711/info The 'nginx' program is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in log files. Attackers can exploit this issue to execute arbitrary commands in a terminal. This issue affects nginx...

nginx 0.8.15 HTTP远程请求缓冲区溢出漏洞

No description provided by source...

nginx 0.8.14 拒绝服务漏洞

No description provided by source...

nginx 0.8.17 WebDAV目录遍历漏洞

No description provided by source...

Fedora Core 12 FEDORA-2009-12750 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12750. OpenVAS Vulnerability Test $Id: fcore200912750.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12750 nginx Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-12782 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. OpenVAS Vulnerability Test $Id: fcore200912782.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12782 nginx Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-12775 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12775. OpenVAS Vulnerability Test $Id: fcore200912775.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12775 nginx Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-12782 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12782. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-12775 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12775. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 12 FEDORA-2009-12750 (nginx)

The remote host is missing an update to nginx announced via advisory FEDORA-2009-12750. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 12 : nginx-0.7.64-1.fc12 (2009-12750)

Fri Dec 4 2009 Jeremy Hinegardner - 0.7.64-1 - Update to new stable 0.7.64 - Thu Oct 29 2009 Jeremy Hinegardner - 0.7.63-1 - Update to new stable 0.7.63 - reinstate zlib dependency Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 11 : nginx-0.7.64-1.fc11 (2009-12782)

Fri Dec 4 2009 Jeremy Hinegardner - 0.7.64-1 - update to 0.7.64 - Thu Oct 29 2009 Jeremy Hinegardner - 0.7.63-1 - update to 0.7.63 - Mon Sep 14 2009 Jeremy Hinegardner - 0.7.62-1 - update to 0.7.62 - fixes CVE-2009-2629 - Sun Aug 2 2009 Jeremy Hinegardner - 0.7.61-1 - update to new stable 0.7.61...

Fedora 10 : nginx-0.7.64-1.fc10 (2009-12775)

Fri Dec 4 2009 Jeremy Hinegardner - 0.7.64-1 - update to 0.7.64 - Thu Oct 29 2009 Jeremy Hinegardner - 0.7.63-1 - update to 0.7.63 - Mon Sep 14 2009 Jeremy Hinegardner - 0.7.62-1 - update to 0.7.62 - fixes CVE-2009-2629 - Sun Aug 2 2009 Jeremy Hinegardner - 0.7.61-1 - update to new stable 0.7.61...

[SECURITY] Fedora 11 Update: nginx-0.7.64-1.fc11

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 10 Update: nginx-0.7.64-1.fc10

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 12 Update: nginx-0.7.64-1.fc12

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

nginx ngx_http_process_request_headers()函数空指针引用拒绝服务漏洞

BUGTRAQ ID: 36839 CVECAN ID: CVE-2009-3896 nginx是多平台的HTTP服务器和邮件代理服务器。 nginx服务器的src/http/ngxhttpparse.c文件的ngxhttpprocessrequestheaders函数中存在空指针引用错误，远程攻击者可以通过超长的URI来触发这个漏洞，导致worker进程崩溃。 Igor Sysoev nginx 0.8.x Igor Sysoev nginx 0.7.x Igor Sysoev nginx 0.6.x Igor Sysoev nginx 0.5.x Igor Sysoev nginx...

Null pointer dereference

src/http/ngxhttpparse.c in nginx aka Engine X 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service NULL pointer dereference and worker process crash via a long URI...