Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2009-3898

Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.

  • Published: Nov 24, 2009
  • Updated: Apr 13, 2023
  • CVE: CVE-2009-3898
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.9
  • AV:N/AC:M/Au:S/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
f5 / nginx 0.6.1516 0.6.1516.x
f5 / nginx 0.1.0 0.1.0.x
f5 / nginx 0.1.1 0.1.1.x
f5 / nginx 0.1.8 0.1.8.x
f5 / nginx 0.1.9 0.1.9.x
f5 / nginx 0.1.6 0.1.6.x
f5 / nginx 0.1.7 0.1.7.x
f5 / nginx 0.1.4 0.1.4.x
f5 / nginx 0.1.5 0.1.5.x
f5 / nginx 0.1.2 0.1.2.x
f5 / nginx 0.1.3 0.1.3.x
f5 / nginx 0.1.16 0.1.16.x
f5 / nginx 0.1.17 0.1.17.x
f5 / nginx 0.1.14 0.1.14.x
f5 / nginx 0.1.15 0.1.15.x
f5 / nginx 0.1.12 0.1.12.x
f5 / nginx 0.1.13 0.1.13.x
f5 / nginx 0.1.10 0.1.10.x
f5 / nginx 0.1.11 0.1.11.x
f5 / nginx 0.1.24 0.1.24.x
f5 / nginx 0.1.25 0.1.25.x
f5 / nginx 0.1.22 0.1.22.x
f5 / nginx 0.1.23 0.1.23.x
f5 / nginx 0.1.20 0.1.20.x
f5 / nginx 0.1.21 0.1.21.x
f5 / nginx 0.1.18 0.1.18.x
f5 / nginx 0.1.19 0.1.19.x
f5 / nginx 0.1.32 0.1.32.x
f5 / nginx 0.1.33 0.1.33.x
f5 / nginx 0.1.30 0.1.30.x
f5 / nginx 0.1.31 0.1.31.x
f5 / nginx 0.1.28 0.1.28.x
f5 / nginx 0.1.29 0.1.29.x
f5 / nginx 0.1.26 0.1.26.x
f5 / nginx 0.1.27 0.1.27.x
f5 / nginx 0.1.40 0.1.40.x
f5 / nginx 0.1.41 0.1.41.x
f5 / nginx 0.1.38 0.1.38.x
f5 / nginx 0.1.39 0.1.39.x
f5 / nginx 0.1.36 0.1.36.x
f5 / nginx 0.1.37 0.1.37.x
f5 / nginx 0.1.34 0.1.34.x
f5 / nginx 0.1.35 0.1.35.x
f5 / nginx 0.2.2 0.2.2.x
f5 / nginx 0.2.3 0.2.3.x
f5 / nginx 0.2.0 0.2.0.x
f5 / nginx 0.2.1 0.2.1.x
f5 / nginx 0.1.44 0.1.44.x
f5 / nginx 0.1.45 0.1.45.x
f5 / nginx 0.1.42 0.1.42.x
f5 / nginx 0.1.43 0.1.43.x
f5 / nginx 0.3.3 0.3.3.x
f5 / nginx 0.3.4 0.3.4.x
f5 / nginx 0.3.1 0.3.1.x
f5 / nginx 0.3.2 0.3.2.x
f5 / nginx 0.2.6 0.2.6.x
f5 / nginx 0.3.0 0.3.0.x
f5 / nginx 0.2.4 0.2.4.x
f5 / nginx 0.2.5 0.2.5.x
f5 / nginx 0.3.11 0.3.11.x
f5 / nginx 0.3.12 0.3.12.x
f5 / nginx 0.3.9 0.3.9.x
f5 / nginx 0.3.10 0.3.10.x
f5 / nginx 0.3.7 0.3.7.x
f5 / nginx 0.3.8 0.3.8.x
f5 / nginx 0.3.5 0.3.5.x
f5 / nginx 0.3.6 0.3.6.x
f5 / nginx 0.3.19 0.3.19.x
f5 / nginx 0.3.20 0.3.20.x
f5 / nginx 0.3.17 0.3.17.x
f5 / nginx 0.3.18 0.3.18.x
f5 / nginx 0.3.15 0.3.15.x
f5 / nginx 0.3.16 0.3.16.x
f5 / nginx 0.3.13 0.3.13.x
f5 / nginx 0.3.14 0.3.14.x
f5 / nginx 0.3.27 0.3.27.x
f5 / nginx 0.3.28 0.3.28.x
f5 / nginx 0.3.25 0.3.25.x
f5 / nginx 0.3.26 0.3.26.x
f5 / nginx 0.3.23 0.3.23.x
f5 / nginx 0.3.24 0.3.24.x
f5 / nginx 0.3.21 0.3.21.x
f5 / nginx 0.3.22 0.3.22.x
f5 / nginx 0.3.35 0.3.35.x
f5 / nginx 0.3.36 0.3.36.x
f5 / nginx 0.3.33 0.3.33.x
f5 / nginx 0.3.34 0.3.34.x
f5 / nginx 0.3.31 0.3.31.x
f5 / nginx 0.3.32 0.3.32.x
f5 / nginx 0.3.29 0.3.29.x
f5 / nginx 0.3.30 0.3.30.x
f5 / nginx 0.3.43 0.3.43.x
f5 / nginx 0.3.44 0.3.44.x
f5 / nginx 0.3.41 0.3.41.x
f5 / nginx 0.3.42 0.3.42.x
f5 / nginx 0.3.39 0.3.39.x
f5 / nginx 0.3.40 0.3.40.x
f5 / nginx 0.3.37 0.3.37.x
f5 / nginx 0.3.38 0.3.38.x
f5 / nginx 0.3.51 0.3.51.x
f5 / nginx 0.3.52 0.3.52.x
f5 / nginx 0.3.49 0.3.49.x
f5 / nginx 0.3.50 0.3.50.x
f5 / nginx 0.3.47 0.3.47.x
f5 / nginx 0.3.48 0.3.48.x
f5 / nginx 0.3.45 0.3.45.x
f5 / nginx 0.3.46 0.3.46.x
f5 / nginx 0.3.59 0.3.59.x
f5 / nginx 0.3.60 0.3.60.x
f5 / nginx 0.3.57 0.3.57.x
f5 / nginx 0.3.58 0.3.58.x
f5 / nginx 0.3.55 0.3.55.x
f5 / nginx 0.3.56 0.3.56.x
f5 / nginx 0.3.53 0.3.53.x
f5 / nginx 0.3.54 0.3.54.x
f5 / nginx 0.4.1 0.4.1.x
f5 / nginx 0.3.61 0.3.61.x
f5 / nginx 0.4.0 0.4.0.x
f5 / nginx 0.4.5 0.4.5.x
f5 / nginx 0.4.6 0.4.6.x
f5 / nginx 0.4.3 0.4.3.x
f5 / nginx 0.4.4 0.4.4.x
f5 / nginx 0.4.2 0.4.2.x
f5 / nginx 0.4.7 0.4.7.x
f5 / nginx 0.4.8 0.4.8.x
f5 / nginx 0.4.13 0.4.13.x
f5 / nginx 0.4.11 0.4.11.x
f5 / nginx 0.4.12 0.4.12.x
f5 / nginx 0.4.9 0.4.9.x
f5 / nginx 0.4.10 0.4.10.x
f5 / nginx 0.5.6 0.5.6.x
f5 / nginx 0.5.7 0.5.7.x
f5 / nginx 0.5.4 0.5.4.x
f5 / nginx 0.5.5 0.5.5.x
f5 / nginx 0.5.2 0.5.2.x
f5 / nginx 0.5.3 0.5.3.x
f5 / nginx 0.5.0 0.5.0.x
f5 / nginx 0.5.1 0.5.1.x
f5 / nginx 0.5.12 0.5.12.x
f5 / nginx 0.5.10 0.5.10.x
f5 / nginx 0.5.11 0.5.11.x
f5 / nginx 0.5.8 0.5.8.x
f5 / nginx 0.5.9 0.5.9.x
f5 / nginx 0.5.20 0.5.20.x
f5 / nginx 0.5.21 0.5.21.x
f5 / nginx 0.5.18 0.5.18.x
f5 / nginx 0.5.19 0.5.19.x
f5 / nginx 0.5.16 0.5.16.x
f5 / nginx 0.5.17 0.5.17.x
f5 / nginx 0.5.14 0.5.14.x
f5 / nginx 0.5.15 0.5.15.x
f5 / nginx 0.5.13 0.5.13.x
f5 / nginx 0.5.22 0.5.22.x
f5 / nginx 0.5.23 0.5.23.x
f5 / nginx 0.5.30 0.5.30.x
f5 / nginx 0.5.31 0.5.31.x
f5 / nginx 0.5.28 0.5.28.x
f5 / nginx 0.5.29 0.5.29.x
f5 / nginx 0.5.26 0.5.26.x
f5 / nginx 0.5.27 0.5.27.x
f5 / nginx 0.5.24 0.5.24.x
f5 / nginx 0.5.25 0.5.25.x
f5 / nginx 0.5.34 0.5.34.x
f5 / nginx 0.5.32 0.5.32.x
f5 / nginx 0.5.33 0.5.33.x
f5 / nginx 0.6.0 0.6.0.x
f5 / nginx 0.5.36 0.5.36.x
f5 / nginx 0.5.37 0.5.37.x
f5 / nginx 0.5.35 0.5.35.x
f5 / nginx 0.6.7 0.6.7.x
f5 / nginx 0.6.8 0.6.8.x
f5 / nginx 0.6.5 0.6.5.x
f5 / nginx 0.6.6 0.6.6.x
f5 / nginx 0.6.3 0.6.3.x
f5 / nginx 0.6.4 0.6.4.x
f5 / nginx 0.6.1 0.6.1.x
f5 / nginx 0.6.2 0.6.2.x
f5 / nginx 0.6.15 0.6.15.x
f5 / nginx 0.6.13 0.6.13.x
f5 / nginx 0.6.14 0.6.14.x
f5 / nginx 0.6.11 0.6.11.x
f5 / nginx 0.6.12 0.6.12.x
f5 / nginx 0.6.9 0.6.9.x
f5 / nginx 0.6.10 0.6.10.x
f5 / nginx 0.6.17 0.6.17.x
f5 / nginx 0.6.23 0.6.23.x
f5 / nginx 0.6.24 0.6.24.x
f5 / nginx 0.6.21 0.6.21.x
f5 / nginx 0.6.22 0.6.22.x
f5 / nginx 0.6.19 0.6.19.x
f5 / nginx 0.6.20 0.6.20.x
f5 / nginx 0.6.18 0.6.18.x
f5 / nginx 0.6.31 0.6.31.x
f5 / nginx 0.6.32 0.6.32.x
f5 / nginx 0.6.29 0.6.29.x
f5 / nginx 0.6.30 0.6.30.x
f5 / nginx 0.6.27 0.6.27.x
f5 / nginx 0.6.28 0.6.28.x
f5 / nginx 0.6.25 0.6.25.x
f5 / nginx 0.6.26 0.6.26.x
f5 / nginx 0.6.37 0.6.37.x
f5 / nginx 0.6.38 0.6.38.x
f5 / nginx 0.6.35 0.6.35.x
f5 / nginx 0.6.36 0.6.36.x
f5 / nginx 0.6.33 0.6.33.x
f5 / nginx 0.6.34 0.6.34.x
f5 / nginx 0.7.0 0.7.0.x
f5 / nginx 0.7.7 0.7.7.x
f5 / nginx 0.7.8 0.7.8.x
f5 / nginx 0.7.5 0.7.5.x
f5 / nginx 0.7.6 0.7.6.x
f5 / nginx 0.7.3 0.7.3.x
f5 / nginx 0.7.4 0.7.4.x
f5 / nginx 0.7.1 0.7.1.x
f5 / nginx 0.7.2 0.7.2.x
f5 / nginx 0.7.15 0.7.15.x
f5 / nginx 0.7.16 0.7.16.x
f5 / nginx 0.7.13 0.7.13.x
f5 / nginx 0.7.14 0.7.14.x
f5 / nginx 0.7.11 0.7.11.x
f5 / nginx 0.7.12 0.7.12.x
f5 / nginx 0.7.9 0.7.9.x
f5 / nginx 0.7.10 0.7.10.x
f5 / nginx 0.7.23 0.7.23.x
f5 / nginx 0.7.24 0.7.24.x
f5 / nginx 0.7.21 0.7.21.x
f5 / nginx 0.7.22 0.7.22.x
f5 / nginx 0.7.19 0.7.19.x
f5 / nginx 0.7.20 0.7.20.x
f5 / nginx 0.7.17 0.7.17.x
f5 / nginx 0.7.18 0.7.18.x
f5 / nginx 0.7.29 0.7.29.x
f5 / nginx 0.7.30 0.7.30.x
f5 / nginx 0.7.27 0.7.27.x
f5 / nginx 0.7.28 0.7.28.x
f5 / nginx 0.7.25 0.7.25.x
f5 / nginx 0.7.26 0.7.26.x
f5 / nginx 0.7.31 0.7.31.x
f5 / nginx - 0.7.62.x
f5 / nginx 0.7.32 0.7.32.x
f5 / nginx 0.7.39 0.7.39.x
f5 / nginx 0.7.40 0.7.40.x
f5 / nginx 0.7.37 0.7.37.x
f5 / nginx 0.7.38 0.7.38.x
f5 / nginx 0.7.35 0.7.35.x
f5 / nginx 0.7.36 0.7.36.x
f5 / nginx 0.7.33 0.7.33.x
f5 / nginx 0.7.34 0.7.34.x
f5 / nginx 0.7.47 0.7.47.x
f5 / nginx 0.7.48 0.7.48.x
f5 / nginx 0.7.45 0.7.45.x
f5 / nginx 0.7.46 0.7.46.x
f5 / nginx 0.7.43 0.7.43.x
f5 / nginx 0.7.44 0.7.44.x
f5 / nginx 0.7.41 0.7.41.x
f5 / nginx 0.7.42 0.7.42.x
f5 / nginx 0.7.55 0.7.55.x
f5 / nginx 0.7.56 0.7.56.x
f5 / nginx 0.7.53 0.7.53.x
f5 / nginx 0.7.54 0.7.54.x
f5 / nginx 0.7.51 0.7.51.x
f5 / nginx 0.7.52 0.7.52.x
f5 / nginx 0.7.49 0.7.49.x
f5 / nginx 0.7.50 0.7.50.x
f5 / nginx 0.7.61 0.7.61.x
f5 / nginx 0.7.59 0.7.59.x
f5 / nginx 0.7.60 0.7.60.x
f5 / nginx 0.7.57 0.7.57.x
f5 / nginx 0.7.58 0.7.58.x
f5 / nginx 0.8.1 0.8.1.x
f5 / nginx 0.8.2 0.8.2.x
f5 / nginx 0.8.0 0.8.0.x
f5 / nginx 0.8.9 0.8.9.x
f5 / nginx 0.8.10 0.8.10.x
f5 / nginx 0.8.7 0.8.7.x
f5 / nginx 0.8.8 0.8.8.x
f5 / nginx 0.8.5 0.8.5.x
f5 / nginx 0.8.6 0.8.6.x
f5 / nginx 0.8.3 0.8.3.x
f5 / nginx 0.8.4 0.8.4.x
f5 / nginx 0.8.15 0.8.15.x
f5 / nginx 0.8.13 0.8.13.x
f5 / nginx 0.8.14 0.8.14.x
f5 / nginx 0.8.11 0.8.11.x
f5 / nginx 0.8.12 0.8.12.x