7.5

CVE-2011-0751

Exploit
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nazgul ≫ Nostromo Version <= 1.9.3
Nazgul ≫ Nostromo Version0.1
Nazgul ≫ Nostromo Version0.2
Nazgul ≫ Nostromo Version0.3
Nazgul ≫ Nostromo Version0.4
Nazgul ≫ Nostromo Version0.5
Nazgul ≫ Nostromo Version0.6
Nazgul ≫ Nostromo Version0.7
Nazgul ≫ Nostromo Version0.8
Nazgul ≫ Nostromo Version0.9
Nazgul ≫ Nostromo Version1.0
Nazgul ≫ Nostromo Version1.1
Nazgul ≫ Nostromo Version1.2
Nazgul ≫ Nostromo Version1.3
Nazgul ≫ Nostromo Version1.4
Nazgul ≫ Nostromo Version1.5
Nazgul ≫ Nostromo Version1.5.1
Nazgul ≫ Nostromo Version1.6
Nazgul ≫ Nostromo Version1.7
Nazgul ≫ Nostromo Version1.7.1
Nazgul ≫ Nostromo Version1.7.2
Nazgul ≫ Nostromo Version1.7.3
Nazgul ≫ Nostromo Version1.7.4
Nazgul ≫ Nostromo Version1.7.5
Nazgul ≫ Nostromo Version1.7.6
Nazgul ≫ Nostromo Version1.7.7
Nazgul ≫ Nostromo Version1.7.8
Nazgul ≫ Nostromo Version1.7.9
Nazgul ≫ Nostromo Version1.8
Nazgul ≫ Nostromo Version1.8.1
Nazgul ≫ Nostromo Version1.8.2
Nazgul ≫ Nostromo Version1.8.3
Nazgul ≫ Nostromo Version1.8.4
Nazgul ≫ Nostromo Version1.8.5
Nazgul ≫ Nostromo Version1.8.6
Nazgul ≫ Nostromo Version1.8.7
Nazgul ≫ Nostromo Version1.8.8
Nazgul ≫ Nostromo Version1.8.9
Nazgul ≫ Nostromo Version1.9
Nazgul ≫ Nostromo Version1.9.1
Nazgul ≫ Nostromo Version1.9.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.92% 0.91
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.