Test Kennung:	1.3.6.1.4.1.25623.1.0.103469
Kategorie:	Web Servers
Titel:	nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
Zusammenfassung:	nginx is prone to an information-disclosure vulnerability.
Beschreibung:	Summary: nginx is prone to an information-disclosure vulnerability. Vulnerability Impact: Attackers can exploit this issue to harvest sensitive information that may lead to further attacks. Solution: Updates are available. Please see the references for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	BugTraq ID: 52578 Common Vulnerability Exposure (CVE) ID: CVE-2012-1180 http://www.securityfocus.com/bid/52578 Bugtraq: 20120315 nginx fix for malformed HTTP responses from upstream servers (Google Search) http://seclists.org/bugtraq/2012/Mar/65 Debian Security Information: DSA-2434 (Google Search) http://www.debian.org/security/2012/dsa-2434 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077966.html http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076646.html http://lists.fedoraproject.org/pipermail/package-announce/2012-March/076671.html http://security.gentoo.org/glsa/glsa-201203-22.xml http://www.mandriva.com/security/advisories?name=MDVSA-2012:043 https://bugzilla.redhat.com/show_bug.cgi?id=803856 http://www.openwall.com/lists/oss-security/2012/03/15/5 http://www.openwall.com/lists/oss-security/2012/03/15/9 http://osvdb.org/80124 http://www.securitytracker.com/id?1026827 http://secunia.com/advisories/48465 http://secunia.com/advisories/48577 SuSE Security Announcement: openSUSE-SU-2012:0469 (Google Search) https://hermes.opensuse.org/messages/14173096 XForce ISS Database: nginx-ngxcpystrn-info-disclosure(74191) https://exchange.xforce.ibmcloud.com/vulnerabilities/74191
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.