CVE-2009-2629

Related Files

Gentoo Linux Security Advisory 200909-18

Posted Sep 19, 2009

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200909-18 - A buffer underflow vulnerability in the request URI processing of nginx might enable remote attackers to execute arbitrary code or cause a Denial of Service. Chris Ries reported a heap-based buffer underflow in the ngx_http_parse_complex_uri() function in http/ngx_http_parse.c when parsing the request URI. Versions less than 0.7.62 are affected.

tags | advisory, remote, web, denial of service, arbitrary

systems | linux, gentoo

advisories | CVE-2009-2629

SHA-256 | 3e186b6e8020ac6e5882ce73b38aedf1a23f65065e34c0d65c214ea8519421aa

Download | Favorite | View

Debian Linux Security Advisory 1884-1

Posted Sep 15, 2009

Authored by Debian | Site debian.org

Debian Security Advisory 1884-1 - Chris Ries discovered that nginx, a high-performance HTTP server, reverse proxy and IMAP/POP3 proxy server, is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process (www-data on Debian) or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.

tags | advisory, web, denial of service, arbitrary, imap

systems | linux, debian

advisories | CVE-2009-2629

SHA-256 | 1419e6a12847d769f87454f95d9dcca030059bae87b601f27e6e4beb3aa3d9ca

Download | Favorite | View