Description

This alert was generated using only banner information. It may be a false positive.

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

Remediation

Upgrade nginx to the latest version.

References

nginx Homepage

CVE-2009-2629

Related Vulnerabilities

MySQL CVE-2016-9841 Vulnerability (CVE-2016-9841)

WordPress Other Vulnerability (CVE-2006-4743)

WordPress Plugin Backup Migration Information Disclosure (1.3.5)

WordPress Plugin Show-Hide/Collapse-Expand Cross-Site Scripting (1.2.5)

WordPress Plugin WordPress Alipay/Tenpay/PayPal Cross-Site Scripting (3.6.0)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Buffer Overflow Missing Update CWE-119 CVE-2009-2629