51 matches found
CVE-2019-16279: Improper Limitation of a Pathname to a Restricted Directory
A memory error in the function SSLaccept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request...
PT-2019-14609
Name of the Vulnerable Software and Affected Versions Nostromo nhttpd versions 1.9.6 and earlier Description The issue allows an attacker to achieve remote code execution via a crafted HTTP request due to a directory traversal vulnerability in the http verify function. This vulnerability is being...
CVE-2019-16278: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal in the function httpverify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request...
PT-2019-14610
Name of the Vulnerable Software and Affected Versions nostromo nhttpd versions 1.9.6 and earlier Description A memory error in the SSL accept function allows an attacker to trigger a denial of service via a crafted HTTP request. Recommendations For versions 1.9.6 and earlier, consider disabling t...
Nazgul Nostromo nhttpd < 1.9.4 Directory Traversal Vulnerability - Active Check
Nazgul Nostromo nhttpd is prone to a directory traversal vulnerability. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
nostromo nhttpd Directory Traversal Remote Command Execution Vulnerability
nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level privileges. nostromo versions prior to 1.9.4 are...
[RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution
Advisory: nostromo nhttpd directory traversal leading to arbitrary command execution During a penetration test, RedTeam Pentesting discovered a directory traversal vulnerability leading to arbitrary command execution in the nostromo HTTP server. Details ======= Product: nostromo nhttpd Affected...
PT-2011-2607
Name of the Vulnerable Software and Affected Versions nhttpd aka Nostromo webserver versions prior to 1.9.4 Description The issue allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f encoded dot dot slash in a URI. This is a directory traversal vulnerability...
CVE-2011-0751: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in nhttpd aka Nostromo webserver before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f encoded dot dot slash in a URI...
nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution
nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access...
nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution
source: https://www.securityfocus.com/bid/46880/info nostromo nhttpd is prone to a remote command-execution vulnerability because it fails to properly validate user-supplied data. An attacker can exploit this issue to access arbitrary files and execute arbitrary commands with application-level...