Description

nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.

Remediation

References

CVE-2010-2266

Related Vulnerabilities

IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)

WordPress Plugin LearnDash LMS SQL Injection (4.5.3)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-23921)

WordPress Plugin Page Builder:KingComposer-Free Drag and Drop page builder by King-Theme Cross-Site Scripting (2.9.4)

WordPress Plugin JS Job Manager Security Bypass (1.1.8)

Severity

Medium

Classification

CVE-2010-2266 CWE-22

Tags

Missing Update Known Vulnerabilities