nginx 0.5.6-1.13.2 - Integer Overflow in Range Filter Module
Title source: llmExploitation Summary
EIP tracks 16 public exploits for CVE-2017-7529. PoCs published by en0f, liusec, Shehzadcyber.
AI-analyzed exploit summary This PoC exploits an integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) to leak potentially sensitive information. It crafts a malicious Range header to trigger the overflow and dumps leaked data in a hex format.
Description
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Exploits (16)
This PoC exploits an integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) to leak potentially sensitive information. It crafts a malicious Range header to trigger the overflow and dumps leaked data in a hex format.
This repository contains a PoC for CVE-2017-7529, an integer overflow vulnerability in Nginx's range filter module. The exploit sends a maliciously crafted Range header to leak sensitive information from cached responses.
This PoC exploits an integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) to leak sensitive information via a specially crafted HTTP Range header. It checks for vulnerability and dumps leaked data in a hexdump format.
This PoC exploits an integer overflow vulnerability in Nginx 1.10.3 by sending a crafted Range header to trigger a buffer overflow. It checks for vulnerability by verifying the HTTP 206 response and Content-Range header.
This PoC exploits an integer overflow vulnerability in Nginx's range filter module (CVE-2017-7529) to leak sensitive information, such as backend server IPs, by sending a specially crafted HTTP Range header. The script checks for vulnerability and dumps leaked data in a hexdump format.
This PoC exploits CVE-2017-7529, an out-of-bounds read vulnerability in Nginx's range header handling, allowing an attacker to read cached file headers and HTTP response headers by crafting malicious Range requests.
This exploit targets CVE-2017-7529, an integer overflow vulnerability in Nginx's range filter module. It crafts a malicious Range header to trigger an information leak by bypassing intended content length restrictions.
This repository contains a PoC for CVE-2017-7529, an integer overflow vulnerability in Nginx versions prior to 1.13 (excluding 1.12). The exploit leverages a malformed Range header to trigger an overflow, potentially leaking sensitive headers or IP addresses.
This PoC exploits an integer overflow vulnerability in Nginx (CVE-2017-7529) by sending a malformed Range header to trigger a buffer overflow. The script checks if the target is vulnerable by analyzing the response status code and headers.
This PoC exploits CVE-2017-7529, an integer overflow vulnerability in Nginx's range filter module, by sending a malformed Range header to trigger an information leak or denial of service. The script calculates an offset and crafts a Range header to exploit the vulnerability.
This repository contains a working PoC for CVE-2017-7529, an integer overflow vulnerability in Nginx 1.13.2 and earlier. The exploit leverages malformed Range headers to trigger an information leak, potentially exposing sensitive data from memory.
This PoC exploits CVE-2017-7529, an integer overflow vulnerability in Nginx 1.13.2, by sending a crafted Range header to trigger a buffer overflow. It checks for vulnerability by analyzing the server's response for specific headers and status codes.
This PoC exploits CVE-2017-7529, an integer overflow vulnerability in Nginx's range filter module. It sends a crafted Range header to trigger the vulnerability and checks for a 206 Partial Content response with a Content-Range header to confirm exploitation.
This repository contains a minimal Docker setup script for CVE-2017-7529, an integer overflow in Nginx's range filter module, but lacks actual exploit code. It only restarts services and keeps the container running.
This Go-based scanner checks for CVE-2017-7529, an integer overflow vulnerability in nginx's range filter module. It sends crafted Range headers to detect if the target is vulnerable by analyzing HTTP 206 responses and Content-Range headers.
This exploit targets an integer overflow vulnerability in NGiNX 1.6.2 by manipulating the 'Range' header to trigger a buffer overflow. It checks for vulnerability by sending a crafted HTTP request and verifying the response.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N