CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote…

published November 24, 2009

CVSS

—

EPSS

16%

Percentile

96.9

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.15887 · 96.9th percentile
Published: 2009-11-24T17:00Z

EPSS history

Timeline

24 NOV 17:00Z
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote…
cvelistv5