CVE

Id
48663  
CVE No.
CVE-2011-0751  
Status
Candidate  
Description
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f (encoded dot dot slash) in a URI.  
Phase
Assigned (20110202)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
529062 48663 CVE-2011-0751 BUGTRAQ:20110315 [RT-SA-2011-001] nostromo nhttpd directory traversal leading to arbitrary command execution  View
529063 48663 CVE-2011-0751 URL:http://www.securityfocus.com/archive/1/archive/1/517026/100/0/threaded  View
529064 48663 CVE-2011-0751 MISC:http://www.redteam-pentesting.de/advisories/rt-sa-2011-001  View
529065 48663 CVE-2011-0751 CONFIRM:http://www.nazgul.ch/dev_nostromo.html  View
529066 48663 CVE-2011-0751 BID:46880  View
529067 48663 CVE-2011-0751 URL:http://www.securityfocus.com/bid/46880  View
529068 48663 CVE-2011-0751 OSVDB:71235  View
529069 48663 CVE-2011-0751 URL:http://osvdb.org/71235  View
529070 48663 CVE-2011-0751 SECUNIA:43775  View
529071 48663 CVE-2011-0751 URL:http://secunia.com/advisories/43775  View
529072 48663 CVE-2011-0751 SREASON:8140  View
529073 48663 CVE-2011-0751 URL:http://securityreason.com/securityalert/8140  View
529074 48663 CVE-2011-0751 VUPEN:ADV-2011-0674  View
529075 48663 CVE-2011-0751 URL:http://www.vupen.com/english/advisories/2011/0674  View
529076 48663 CVE-2011-0751 XF:nostromo-http-command-execution(66103)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33997 JVNDB-2011-004239 Trustwave WebDefend Enterprise のアプリケーションサーバにおけるセキュリティイベントデータを読まれる脆弱性 Trustwave WebDefend Enterprise のアプリケーションサーバは、ハードコードされたコンソール資格情報を使用するため、セキュリティイベントデータを読まれる脆弱性が存在します。 CVE-2011-0756 48663 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004239.html  View