Test ID:	1.3.6.1.4.1.25623.1.0.803194
Category:	Web Servers
Title:	nginx Arbitrary Code Execution Vulnerability (Aug 2011)
Summary:	nginx is prone to an arbitrary code execution vulnerability.
Description:	Summary: nginx is prone to an arbitrary code execution vulnerability. Vulnerability Insight: The null bytes are allowed in URIs by default (their presence is indicated via a variable named zero_in_uri defined in ngx_http_request.h). Individual modules have the ability to opt-out of handling URIs with null bytes. Vulnerability Impact: Successful exploitation will allow remote attackers to execution arbitrary code. Affected Software/OS: nginx versions 0.5.x, 0.6.x, 0.7.x through 0.7.65 and 0.8.x through 0.8.37. Solution: Update to version 0.7.66, 0.8.38 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.