nostromo nhttpd directory traversal
Published:		16.03.2011
Source:		BUGTRAQ
SecurityVulns ID:		11505
Type:		remote
Level:		5/10
Description:		Directory traversal (including code execution via CGI) with escaped URI.

Affected:		NOSTROMO : nhttpd 1.9
CVE:		CVE-2011-0751 (Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.)

Original document

RedTeam Pentesting, [RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution (16.03.2011)

Discuss:

Read or add your comments to this news (0 comments)