Lucene search
+L

51 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/14 12:00 a.m.•4 views

CVE-2019-16279: Improper Limitation of a Pathname to a Restricted Directory

A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...

7.5CVSS7.2AI score0.19802EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2019/10/14 12:00 a.m.•15 views

PT-2019-14609

Name of the Vulnerable Software and Affected Versions Nostromo nhttpd versions 1.9.6 and earlier Description The issue allows an attacker to achieve remote code execution via a crafted HTTP request due to a directory traversal vulnerability in the http verify function. This vulnerability is being...

9.8CVSS10AI score0.99033EPSS
SaveExploits25References38
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/14 12:00 a.m.•2 views

CVE-2019-16278: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...

9.8CVSS8.5AI score0.99033EPSS
SaveExploits25References2
Positive Technologies
Positive Technologies
•added 2019/10/14 12:00 a.m.•2 views

PT-2019-14610

Name of the Vulnerable Software and Affected Versions nostromo nhttpd versions 1.9.6 and earlier Description A memory error in the SSL accept function allows an attacker to trigger a denial of service via a crafted HTTP request. Recommendations For versions 1.9.6 and earlier, consider disabling t...

7.5CVSS0.19802EPSS
SaveExploits4References5
OpenVAS
OpenVAS
•added 2011/03/22 12:00 a.m.•29 views

Nazgul Nostromo nhttpd < 1.9.4 Directory Traversal Vulnerability - Active Check

Nazgul Nostromo nhttpd is prone to a directory traversal vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS6.5AI score0.03664EPSS
SaveExploits5References3
OpenVAS
OpenVAS
•added 2011/03/21 12:00 a.m.•36 views

nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability

nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level privileges. nostromo versions prior to 1.9.4 are...

7.5CVSS0.9AI score0.03664EPSS
SaveExploits5References3
securityvulns
securityvulns
•added 2011/03/16 12:00 a.m.•201 views

[RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution

Advisory: nostromo nhttpd directory traversal leading to arbitrary command execution During a penetration test, RedTeam Pentesting discovered a directory traversal vulnerability leading to arbitrary command execution in the nostromo HTTP server. Details ======= Product: nostromo nhttpd Affected...

7.5CVSS9.8AI score0.03664EPSS
SaveExploits5
Positive Technologies
Positive Technologies
•added 2011/03/16 12:00 a.m.•7 views

PT-2011-2607

Name of the Vulnerable Software and Affected Versions nhttpd aka Nostromo webserver versions prior to 1.9.4 Description The issue allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f encoded dot dot slash in a URI. This is a directory traversal vulnerability...

7.5CVSS0.03664EPSS
SaveExploits5References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/03/16 12:00 a.m.•5 views

CVE-2011-0751: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in nhttpd aka Nostromo webserver before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f encoded dot dot slash in a URI...

7.5CVSS6.4AI score0.03664EPSS
SaveExploits5References2
exploitpack
exploitpack
•added 2011/03/05 12:00 a.m.•25 views

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2011/03/05 12:00 a.m.•44 views

nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution

source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level...

7.5CVSS5.2AI score0.03664EPSS
SaveExploits5
Rows per page
Query Builder