CVE-2009-3898

nginx <0.7.63, <0.8.17 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3898. PoCs published by kingcope.

AI-analyzed exploit summary The document describes a directory traversal vulnerability in nginx's WebDAV module (CVE-2009-3898), where the COPY or MOVE methods can be abused via a malformed 'Destination' header to place files outside the webroot. It includes a sample HTTP request demonstrating the exploit but does not provide functional code.

Description

Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.

Exploits (1)

exploitdb WRITEUP VERIFIED
by kingcope · textremotemultiple
https://www.exploit-db.com/exploits/9829

The document describes a directory traversal vulnerability in nginx's WebDAV module (CVE-2009-3898), where the COPY or MOVE methods can be abused via a malformed 'Destination' header to place files outside the webroot. It includes a sample HTTP request demonstrating the exploit but does not provide functional code.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: nginx 0.7.61 (and potentially other versions)
Auth required
Prerequisites: WebDAV enabled · COPY/MOVE permissions granted to the attacker
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (9)

Core 9
Core References
Patch mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125897425223039&w=2
Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/23/10
Patch mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125897327321676&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48577
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36818
Patch mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125900327409842&w=2
Patch mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/20/1
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201203-22.xml

Scores

EPSS 0.1589
EPSS Percentile 96.5%

Details

CWE
CWE-22
Status published
Products (50)
f5/nginx 0.1.0
f5/nginx 0.1.1
f5/nginx 0.1.2
f5/nginx 0.1.3
f5/nginx 0.1.4
f5/nginx 0.1.5
f5/nginx 0.1.6
f5/nginx 0.1.7
f5/nginx 0.1.8
f5/nginx 0.1.9
... and 40 more
Published Nov 24, 2009
Tracked Since Feb 18, 2026