CVE-2010-2263
nginx 0.7.52-0.7.65 and 0.8-0.8.39 on Windows - Unauthenticated Arbitrary File Read via ::$DATA URI Suffix
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2010-2263.
PoCs published by Dr_IDE, Jose A. Vazquez, including Metasploit module auxiliary/scanner/http/nginx_source_disclosure.
AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in nginx 0.8.36 on Windows: remote source disclosure via ADS (Alternate Data Stream) and remote DoS with memory corruption via encoded directory traversal. The PoC provides specific URLs to trigger these issues.
Description
nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
Exploits (3)
The exploit demonstrates two vulnerabilities in nginx 0.8.36 on Windows: remote source disclosure via ADS (Alternate Data Stream) and remote DoS with memory corruption via encoded directory traversal. The PoC provides specific URLs to trigger these issues.
This is a writeup describing a source code disclosure vulnerability in NGINX versions <= 0.7.65 (stable) and 0.8.39 (development) on Windows systems due to improper handling of NTFS Alternate Data Streams (ADS). The PoC involves appending '::$data' to a file path to download its source code.
This Metasploit module exploits a source code disclosure vulnerability in nginx versions 0.7.x and 0.8.x by appending '::$data' to the URI, allowing unauthorized download of source files. It checks for vulnerable versions and saves the disclosed source code to a specified path.