Description

nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.

Remediation

References

CVE-2010-2266

Related Vulnerabilities

Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926)

phpMyAdmin Other Vulnerability (CVE-2005-0544)

WordPress Plugin Timber Cross-Site Scripting (1.2.2)

Oracle Application Server CVE-2008-2589 Vulnerability (CVE-2008-2589)

Perl Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-47100)

Severity

Medium

Classification

CVE-2010-2266 CWE-22

Tags

Missing Update Known Vulnerabilities