vendor:
Nginx HTTP Server
by:
Greg MacManus, hal, saelo
7,5
CVSS
HIGH
Stack Buffer Overflow
119
CWE
Product Name: Nginx HTTP Server
Affected Version From: 1.3.9
Affected Version To: 1.4.0
Patch Exists: YES
Related CWE: CVE-2013-2028
CPE: nginx
Metasploit:
https://www.rapid7.com/db/vulnerabilities/nginx-cve-2013-2028/, https://www.rapid7.com/db/vulnerabilities/amazon-linux-ami-alas-2013-189/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2013-2070/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2013-2028/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2013-2070/, https://www.rapid7.com/db/vulnerabilities/alpine-linux-cve-2013-2028/, https://www.rapid7.com/db/vulnerabilities/nginx-cve-2013-2070/, https://www.rapid7.com/db/vulnerabilities/debian-DSA-2721/
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Ubuntu 13.04 32bit, Ubuntu 12.04 32bit
2013
Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
This module exploits a stack buffer overflow in versions 1.3.9 to 1.4.0 of nginx. The exploit first triggers an integer overflow in the ngx_http_parse_chunked() by supplying an overly long hex value as chunked block size. This value is later used when determining the number of bytes to read into a stack buffer, thus the overflow becomes possible.
Mitigation:
Upgrade to the latest version of nginx
