CVE-2010-2266

Description

nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the %c0.%c0. sequence.

Risk Information

Base Score

6.2

MODERATE

Vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

7.504

Associated Vulnerability

Vulnerability	OS Platform
Update Nginx to 9.1.19	Windows
Update Nginx to 9.1.5	Windows
Update Nginx to 9.1.8	Windows
Update Nginx to 9.2.14	Windows
Update Nginx to 9.2.19	Windows
Update Nginx to 9.2.3	Windows
Update Nginx to 9.2.7	Windows
Update Nginx to 9.3.10	Windows
Update Nginx to 9.3.15	Windows
Update Nginx to 9.3.17	Windows
Update Nginx to 9.1.19 (For Linux)	Linux
Update Nginx to 9.1.5 (For Linux)	Linux
Update Nginx to 9.1.8 (For Linux)	Linux
Update Nginx to 9.2.14 (For Linux)	Linux
Update Nginx to 9.2.19 (For Linux)	Linux
Update Nginx to 9.2.3 (For Linux)	Linux
Update Nginx to 9.2.7 (For Linux)	Linux
Update Nginx to 9.3.10 (For Linux)	Linux
Update Nginx to 9.3.15 (For Linux)	Linux
Update Nginx to 9.3.17 (For Linux)	Linux
Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability (CVE-2010-2266)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234