nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
References
Link | Resource |
---|---|
http://www.exploit-db.com/exploits/13818/ | Exploit Third Party Advisory VDB Entry |
Configurations
Information
Published : 2010-06-15 07:04
Updated : 2021-11-10 07:52
NVD link : CVE-2010-2266
Mitre link : CVE-2010-2266
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
f5
- nginx