Test ID:	1.3.6.1.4.1.25623.1.0.803222
Category:	Web Servers
Title:	nginx Security Bypass Vulnerability - Windows
Summary:	nginx is prone to a security bypass vulnerability.
Description:	Summary: nginx is prone to a security bypass vulnerability. Vulnerability Insight: The flaw is due to an error when processing HTTP requests for resources defined via the 'location' directive. Vulnerability Impact: Successful exploitation will let attackers to gain unauthorized access to restricted resources via specially crafted HTTP requests containing NTFS extended attributes. Affected Software/OS: nginx versions 0.7.52 through 1.2.0 and 1.3.0 on Windows. Solution: Update to nginx version 1.3.1 or 1.2.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-4963 http://english.securitylab.ru/lab/PT-2012-06 http://mailman.nginx.org/pipermail/nginx-announce/2012/000086.html
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.