NetSight
IP …
high7.5Public exploit code

CVE-2013-4547

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Affected products

VendorProductAffected versions
F5Nginx
from 0.8.41 before 1.4.4
from 1.5.0 through 1.5.6
SuseLifecycle Management Server
Version 1.3
SuseStudio Onsite
Version 1.3
SuseWebyast
Version 1.3
OpensuseOpensuse
Versions 11.4, 12.2, 12.3, 13.1

Weakness classification

CWE-116

References