medium5.0Public exploit code
CVE-2010-2266
nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nginx 0.8.36 - Source Disclosure / Denial of Service2010-06-11 · remote · windows · Verified
Impact
nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Nginx | from 0.7.52 before 0.7.67 from 0.8.0 through 0.8.40 |