Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nginxNginxNGINX:CVE-2013-2028
HistoryJul 20, 2013 - 3:37 a.m.

Stack-based buffer overflow with specially crafted request

2013-07-2003:37:20
mailman.nginx.org
211

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.152

Percentile

95.9%

JSON

Stack-based buffer overflow with specially crafted request
Severity: major
CVE-2013-2028
Not vulnerable: 1.5.0+, 1.4.1+
Vulnerable: 1.3.9-1.4.0

Affected configurations

Vulners
Node
f5nginxRange1.3.9–1.4.0
VendorProductVersionCPE
f5nginx*cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*

Related

altlinux 1
exploitpack 2
prion 2
exploitdb 4
debiancve 2
zdt 1
fedora 2
ubuntucve 2
seebug 3
openvas 6
packetstorm 3
nessus 8
nvd 2
canvas 1
cve 2
myhack58 1
metasploit 1
cvelist 2
mageia 1
amazon 1
freebsd 1
securityvulns 1
gentoo 1
altlinux
altlinux
Security fix for the ALT Linux 9 package nginx version 1.4.1-alt1
2013-05-07 00:00:00
exploitpack
exploitpack
Nginx 1.3.9 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
prion
prion
Stack overflow
2013-07-20 03:37:00
Design/Logic Flaw
2013-07-20 03:37:00
exploitdb
exploitdb
Nginx 1.3.9 < 1.4.0 - Denial of Service (PoC)
2013-05-17 00:00:00
Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
2014-03-15 00:00:00
Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
2013-05-28 00:00:00
debiancve
debiancve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
zdt
zdt
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-24 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: nginx-1.4.1-1.fc19
2013-05-12 04:53:58
[SECURITY] Fedora 18 Update: nginx-1.2.9-1.fc18
2013-05-23 12:24:19
ubuntucve
ubuntucve
CVE-2013-2028
2013-07-20 00:00:00
CVE-2013-2070
2013-07-20 00:00:00
seebug
seebug
nginx 1.3.9-1.4.0 - DoS PoC
2014-07-01 00:00:00
nginx 'ngx_http_parse.c'ζ ˆηΌ“ε†²εŒΊζΊ’ε‡ΊζΌζ΄ž
2013-05-17 00:00:00
nginx 1.4.0 64-bit - Remote Exploit for Linux (Generic)
2014-07-01 00:00:00
openvas
openvas
Nginx Chunked Transfer Encoding Stack Based Buffer Overflow Vulnerability
2013-05-21 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-189)
2015-09-08 00:00:00
Fedora Update for nginx FEDORA-2013-8182
2013-05-27 00:00:00
packetstorm
packetstorm
Nginx 1.3.9 / 1.4.0 Denial Of Service
2013-05-17 00:00:00
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-23 00:00:00
Nginx 1.3.9 / 1.4.0 Buffer Overflow
2013-07-19 00:00:00
nessus
nessus
Fedora 19 : nginx-1.4.1-1.fc19 (2013-7560)
2013-05-13 00:00:00
nginx < 1.4.1 / 1.5.0 Multiple Vulnerabilities
2013-05-08 00:00:00
nginx ngx_http_proxy_module.c Multiple Vulnerabilities
2013-05-29 00:00:00
nvd
nvd
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
canvas
canvas
Immunity Canvas: NGINX_CHUNK
2013-07-20 03:37:00
cve
cve
CVE-2013-2028
2013-07-20 03:37:20
CVE-2013-2070
2013-07-20 03:37:25
myhack58
myhack58
BROP Attack of the Nginx remote code execution vulnerabilities analysis and use-vulnerability and early warning-the black bar safety net
2017-01-17 00:00:00
metasploit
metasploit
Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow
2013-05-22 17:52:00
cvelist
cvelist
CVE-2013-2028
2013-07-18 01:00:00
CVE-2013-2070
2013-07-18 01:00:00
mageia
mageia
Updated nginx package fixes security vulnerability
2013-06-06 16:24:33
amazon
amazon
Medium: nginx
2013-05-14 15:35:00
freebsd
freebsd
nginx -- multiple vulnerabilities
2013-05-07 00:00:00
securityvulns
securityvulns
nginx buffer overflow
2013-07-10 00:00:00
gentoo
gentoo
nginx: Multiple vulnerabilities
2013-10-06 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.152

Percentile

95.9%

JSON
Related for NGINX:CVE-2013-2028
altlinux1exploitpack2prion2exploitdb4debiancve2zdt1fedora2ubuntucve2seebug3openvas6packetstorm3nessus8nvd2canvas1cve2myhack581metasploit1cvelist2mageia1amazon1freebsd1securityvulns1gentoo1