The 'nginx' program is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in log files. Attackers can exploit this issue to execute arbitrary commands in a terminal. This issue affects nginx 0.7.64 other versions may also be affected.

• http://nginx.net/
• http://www.securityfocus.com/archive/1/508830
• http://www.securityfocus.com/bid/37711

---

Updated on 2015-03-25