PT-2009-6120 · Nginx · Nginx

Craig · Publicado 2009-11-24 · Atualizado 2021-11-10 · CVE-2009-3898

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions nginx versions 0.7.0 through 0.7.62 nginx versions 0.8.0 through 0.8.16

Description A directory traversal issue allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method. This is due to a vulnerability in the ngx http dav module.c file.

Recommendations For versions 0.7.0 through 0.7.62, update to version 0.7.63 or later. For versions 0.8.0 through 0.8.16, update to version 0.8.17 or later. As a temporary workaround, consider restricting access to the WebDAV COPY and MOVE methods until a patch is available.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-3898

Produtos afetados

Nginx

Referências · 17

• 🔥 https://exploit-db.com/exploits/9829 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0379.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2009-3898 · Aviso do Fabricante
• http://marc.info/?l=oss-security&m=125900327409842&w=2 · Correção
• https://t.me/cvenotify/22810 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-3898 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2009-3898 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201203-22.xml · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2009/11/23/10 · Correção
• http://openwall.com/lists/oss-security/2009/11/20/1 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3898 · Nota
• http://marc.info/?l=oss-security&m=125897425223039&w=2 · Correção
• http://marc.info/?l=oss-security&m=125897327321676&w=2 · Correção
• https://cve.org/CVERecord?id=CVE-2009-3898 · Nota de Segurança
• http://secunia.com/advisories/48577 · Nota