September 13, 2009

Debian Security Advisory 1884 nginx - buffer underflow

Article Source Debian Security Advisories
September 13, 2009, 5:00 pm

Chris Ries discovered that nginx, a high-performance HTTP server, reverse proxy and IMAP/POP3 proxy server, is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process (www-data on Debian) or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request...

Read More

Click Here!