CVE-2011-4963

Description

nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain $index_allocation sequences in a request.

Risk Information

Base Score

7.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.31

Associated Vulnerability

Vulnerability	OS Platform
Update Nginx to 9.1.19	Windows
Update Nginx to 9.1.5	Windows
Update Nginx to 9.1.8	Windows
Update Nginx to 9.2.14	Windows
Update Nginx to 9.2.19	Windows
Update Nginx to 9.2.3	Windows
Update Nginx to 9.2.7	Windows
Update Nginx to 9.3.10	Windows
Update Nginx to 9.3.15	Windows
Update Nginx to 9.3.17	Windows
Update Nginx to 9.1.19 (For Linux)	Linux
Update Nginx to 9.1.5 (For Linux)	Linux
Update Nginx to 9.1.8 (For Linux)	Linux
Update Nginx to 9.2.14 (For Linux)	Linux
Update Nginx to 9.2.19 (For Linux)	Linux
Update Nginx to 9.2.3 (For Linux)	Linux
Update Nginx to 9.2.7 (For Linux)	Linux
Update Nginx to 9.3.10 (For Linux)	Linux
Update Nginx to 9.3.15 (For Linux)	Linux
Update Nginx to 9.3.17 (For Linux)	Linux
CVE-2011-4963	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234