Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCertccCVE-2009-2629
HistorySep 15, 2009 - 10:30 p.m.

CVE-2009-2629

2009-09-1522:30:00
CWE-787
certcc
web.nvd.nist.gov
210
cve-2009-2629
buffer underflow
nvd
security
vulnerability
remote code execution
http requests

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.928

Percentile

99.0%

JSON

Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.

Affected configurations

Nvd
Node
f5nginxRange0.1.0–0.5.38
OR
f5nginxRange0.6.0–0.6.39
OR
f5nginxRange0.7.0–0.7.62
OR
f5nginxRange0.8.0–0.8.15
Node
debiandebian_linuxMatch4.0
OR
debiandebian_linuxMatch5.0
OR
debiandebian_linuxMatch6.0
Node
fedoraprojectfedoraMatch10
OR
fedoraprojectfedoraMatch11
OR
fedoraprojectfedoraMatch12

Related

debian 1
freebsd 1
seebug 1
nessus 9
openvas 19
securityvulns 2
prion 1
nginx 1
gentoo 1
ubuntucve 1
debiancve 1
checkpoint_advisories 1
cvelist 1
fedora 5
canvas 1
cert 1
nvd 1
debian
debian
[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution
2009-09-14 15:53:38
freebsd
freebsd
nginx -- remote denial of service vulnerability
2009-09-14 00:00:00
seebug
seebug
nginx HTTPθ―·ζ±‚θΏœη¨‹ηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2009-09-18 00:00:00
nessus
nessus
Fedora 10 : nginx-0.7.62-1.fc10 (2009-9652)
2009-09-16 00:00:00
Debian DSA-1884-1 : nginx - buffer underflow
2010-02-24 00:00:00
Fedora 11 : nginx-0.7.62-1.fc11 (2009-9630)
2009-09-16 00:00:00
openvas
openvas
FreeBSD Ports: nginx
2009-09-15 00:00:00
nginx HTTP Request Remote Buffer Overflow Vulnerability
2009-10-01 00:00:00
nginx HTTP Request Remote Buffer Overflow Vulnerability
2009-10-01 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution
2009-09-15 00:00:00
nginx proxy server memory corruption
2009-09-15 00:00:00
prion
prion
Buffer overflow
2009-09-15 22:30:00
nginx
nginx
Buffer underflow vulnerability
2009-09-15 22:30:00
gentoo
gentoo
nginx: Remote execution of arbitrary code
2009-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2009-2629
2009-09-15 00:00:00
debiancve
debiancve
CVE-2009-2629
2009-09-15 22:30:00
checkpoint_advisories
checkpoint_advisories
nginx URI Parsing Buffer Underflow (CVE-2009-2629)
2010-01-31 00:00:00
cvelist
cvelist
CVE-2009-2629
2009-09-15 22:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: nginx-0.7.62-1.fc10
2009-09-15 21:01:57
[SECURITY] Fedora 11 Update: nginx-0.7.62-1.fc11
2009-09-15 20:59:51
[SECURITY] Fedora 11 Update: nginx-0.7.64-1.fc11
2009-12-07 07:27:32
canvas
canvas
Immunity Canvas: NGINX
2009-09-15 22:30:00
cert
cert
Nginx ngx_http_parse_complex_uri() buffer underflow vulnerability
2009-09-15 00:00:00
nvd
nvd
CVE-2009-2629
2009-09-15 22:30:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.928

Percentile

99.0%

JSON
Related for CVE-2009-2629
debian1freebsd1seebug1nessus9openvas19securityvulns2prion1nginx1gentoo1ubuntucve1debiancve1checkpoint_advisories1cvelist1fedora5canvas1cert1nvd1