Welcome! Log In Create A New Profile

Advanced

nginx 0day exploit for nginx + fastcgi PHP

Avleen Vig
May 21, 2010 01:14PM
This is currently doing the rounds, so I thought it pertinent to post
it here too.

http://www.webhostingtalk.com/showthread.php?p=6807475#post6807475

I don't know what nginx should do to fix this, but there are two
workarounds given.
If you allow file uploads (especially things like images) and use PHP
FastCGI in the back end, you should take a loot at this now.
The exploit allows for any arbitrary file which is uploaded, to be
executed as PHP.

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
SubjectAuthorPosted

nginx 0day exploit for nginx + fastcgi PHP

Avleen VigMay 21, 2010 01:14PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Avleen VigMay 21, 2010 01:30PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Eren TürkayMay 25, 2010 11:44AM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeMay 21, 2010 01:30PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 01:36PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 01:44PM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeMay 21, 2010 01:52PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 02:16PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian EvansMay 21, 2010 02:30PM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeMay 21, 2010 02:40PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 02:40PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 21, 2010 03:10PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 04:46PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian EvansMay 21, 2010 04:58PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 21, 2010 05:20PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian EvansMay 21, 2010 05:54PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 02:10AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 01:28AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 01:32AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian EvansMay 22, 2010 03:00AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 03:58AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 05:46AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 06:12AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 06:22AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 06:26AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 06:56AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 08:22AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Igor SysoevMay 22, 2010 08:30AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 08:48AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ian M. EvansMay 22, 2010 06:30PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Jérôme LoyetMay 21, 2010 03:50PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Weibin YaoMay 23, 2010 11:24PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Jérôme LoyetMay 24, 2010 03:00AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Weibin YaoMay 24, 2010 04:20AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Cliff WellsMay 21, 2010 09:00PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Grzegorz SienkoMay 21, 2010 09:24PM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeMay 21, 2010 09:34PM

Re: nginx 0day exploit for nginx + fastcgi PHP

gdorkJanuary 26, 2011 11:07PM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeJanuary 26, 2011 11:16PM

Re: nginx 0day exploit for nginx + fastcgi PHP

edogawaconanJanuary 27, 2011 12:28AM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeJanuary 27, 2011 01:08AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Cliff WellsMay 21, 2010 10:42PM

Re: nginx 0day exploit for nginx + fastcgi PHP

Ding DengMay 22, 2010 09:28AM

Re: nginx 0day exploit for nginx + fastcgi PHP

mikeMay 22, 2010 03:30PM

Re: nginx 0day exploit for nginx + fastcgi PHP

brianmercerMay 21, 2010 05:03PM

Re: nginx 0day exploit for nginx + fastcgi PHP

tuurtntDecember 14, 2011 06:26PM

Re: nginx 0day exploit for nginx + fastcgi PHP

KraiserFebruary 17, 2012 09:53AM

Re: nginx 0day exploit for nginx + fastcgi PHP

Reinis RozitisFebruary 17, 2012 11:42AM

Re: nginx 0day exploit for nginx + fastcgi PHP

zseroOctober 30, 2012 01:01PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 131
Record Number of Users: 7 on March 06, 2014
Record Number of Guests: 165 on April 21, 2014
Powered by nginx    Powered by FreeBSD    PHP Powered    Powered by Percona     ipv6 ready