CVE-2010-2263

Опубликовано: 15 июн. 2010

Источник: nvd

CVSS2: 5

EPSS Высокий

Описание

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.

Ссылки

http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html
Exploit
Release Notes
Third Party Advisory
http://www.exploit-db.com/exploits/13818
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/13822
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/40760
Exploit
Third Party Advisory
VDB Entry
http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html
Exploit
Release Notes
Third Party Advisory
http://www.exploit-db.com/exploits/13818
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/13822
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/40760
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*

Версия от 0.7.52 (включая) до 0.7.66 (исключая)

cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*

Версия от 0.8.0 (включая) до 0.8.39 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.71926

Высокий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2010-2263

ubuntu

около 16 лет назад

CVE-2010-2263

debian

около 16 лет назад

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows ...

GHSA-2rq5-xfv5-vq54

github

больше 4 лет назад

EPSS

Процентиль: 99%

0.71926

Высокий

5 Medium

CVSS2

Дефекты

CWE-200