The 'nginx' program is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings ('../') to overwrite arbitrary files outside the root directory. These issues affect nginx 0.7.61 and 0.7.62 other versions may also be affected.

• http://nginx.net/
• http://www.securityfocus.com/archive/1/506662
• http://www.securityfocus.com/bid/36490

---

Updated on 2015-03-25