CVE-2019-16278

Опубликовано: 14 окт. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Критический

Описание

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

Ссылки

http://packetstormsecurity.com/files/155045/Nostromo-1.9.6-Directory-Traversal-Remote-Command-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/155802/nostromo-1.9.6-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.nazgul.ch/dev/nostromo_cl.txt
Release Notes
https://git.sp0re.sh/sp0re/Nhttpd-exploits
Broken Link
Exploit
Third Party Advisory
https://sp0re.sh
Broken Link
Not Applicable
http://packetstormsecurity.com/files/155045/Nostromo-1.9.6-Directory-Traversal-Remote-Command-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/155802/nostromo-1.9.6-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://www.nazgul.ch/dev/nostromo_cl.txt
Release Notes
https://git.sp0re.sh/sp0re/Nhttpd-exploits
Broken Link
Exploit
Third Party Advisory
https://sp0re.sh
Broken Link
Not Applicable
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-16278
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nazgul:nostromo_nhttpd:*:*:*:*:*:*:*:*

Версия до 1.9.7 (исключая)

EPSS

Процентиль: 100%

0.94393

Критический

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2019-16278

CVSS3: 9.8

debian

больше 6 лет назад

Directory Traversal in the function http_verify in nostromo nhttpd thr ...

GHSA-495x-r3cr-6rgx

CVSS3: 9.8

github

больше 3 лет назад

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

EPSS

Процентиль: 100%

0.94393

Критический

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22