NetSight
IP …
high7.5Public exploit code

CVE-2009-2629

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote at…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

Affected products

VendorProductAffected versions
F5Nginx
from 0.1.0 before 0.5.38
from 0.6.0 before 0.6.39
from 0.7.0 before 0.7.62
from 0.8.0 before 0.8.15
DebianDebian Linux
Versions 4.0, 5.0, 6.0
FedoraprojectFedora
Versions 10, 11, 12

Weakness classification

CWE-787

References