nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

Bugtraq ID:	40760
Class:	Unknown
CVE:	CVE-2010-2263
Remote:	Yes
Local:	No
Published:	Jun 11 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Dr_IDE and Jose Antonio Vazquez Gonzalez
Vulnerable:	Igor Sysoev nginx 0.8.36 Igor Sysoev nginx 0.8.35 Igor Sysoev nginx 0.8.33 Igor Sysoev nginx 0.8.32 Igor Sysoev nginx 0.8.15 Igor Sysoev nginx 0.8.14 Igor Sysoev nginx 0.7.65 Igor Sysoev nginx 0.7.64 Igor Sysoev nginx 0.7.62 Igor Sysoev nginx 0.7.61 Igor Sysoev nginx 0.7
Not Vulnerable:	Igor Sysoev nginx 0.8.41 Igor Sysoev nginx 0.7.66

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

nginx is prone to remote source-code-disclosure and denial-of-service vulnerabilities.

An attacker can exploit these vulnerabilities to view the source code of files in the context of the server process or cause denial-of-service conditions.

nginx 0.8.36 for Windows is vulnerable; other versions may also be affected.

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

Attackers can exploit these issues using a browser.

The following example URIs are available:

http://www.example.com/index.html::$DATA
http://www.example.com/%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%20
http://www.example.com/%c0.%c0./%c0.%c0./%c0.%c0./%20
http://www.example.com/%c0.%c0./%c0.%c0./%20

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

Solution:
Reports indicate these issues have been addressed in versions 0.8.40 and 0.7.66. Contact the vendor for more information.


Igor Sysoev nginx 0.8.36

• Igor Sysoev nginx-0.8.40.zip
  http://nginx.org/download/nginx-0.8.40.zip

nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities

References:

• nginx Homepage (Igor Sysoev)