Re: nginx vulnerability

2020-11-24 Thread Maxim Dounin
Hello! On Thu, Nov 19, 2020 at 02:06:46PM -0800, Frank Liu wrote: > CVE-2019-20372 mentioned a security vulnerability, but I don't see it in > http://nginx.org/en/security_advisories.html > Does that mean CVE-2019-20372 is not considered a security vulnerability by > nginx? Or is it because nginx

nginx vulnerability

2020-11-19 Thread Frank Liu
Hi, CVE-2019-20372 mentioned a security vulnerability, but I don't see it in http://nginx.org/en/security_advisories.html Does that mean CVE-2019-20372 is not considered a security vulnerability by nginx? Or is it because nginx standard config won't be vulnerable, and users have to enable error_lo

Nginx Vulnerability on FreeBSD

2016-01-04 Thread Peter Chen
Hi, I am trying to do a security research experiment on FreeBSD. I try to test the Nginx Vulnerability CVE-2013-2028 on FreeBSD 10.1 x86-64, with Nginx 1.3.9/1.4.0. (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2028) However, most exploit samples can succeed on Linux, but not FreeBSD