CVEvulnerability
CVE-2010-2263
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
Affected configurations
• f5 nginx (>= 0.7.52 < 0.7.66)
• f5 nginx (>= 0.8.0 <= 0.8.39)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html Exploit, Release Notes, Third Party Advisory
- http://www.exploit-db.com/exploits/13818 Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/13822 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/40760 Exploit, Third Party Advisory, VDB Entry
- http://spa-s3c.blogspot.com/2010/06/full-responsible-disclosurenginx-engine.html Exploit, Release Notes, Third Party Advisory
- http://www.exploit-db.com/exploits/13818 Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/13822 Exploit, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/40760 Exploit, Third Party Advisory, VDB Entry