# Nginx remote exploit?

**URL:** <https://www.ruby-forum.com/t/nginx-remote-exploit/189668>\
**Category:** NGINX\
**Created:** [June 4, 2010, 6:40pm UTC](https://www.ruby-forum.com/t/nginx-remote-exploit/189668 "2010-06-04T18:40:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hinky\_Dink](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/h/e95f7d/32.png) [@Hinky\_Dink](https://www.ruby-forum.com/u/Hinky_Dink)\
**Post date:** [June 4, 2010, 6:40pm UTC](https://www.ruby-forum.com/t/nginx-remote-exploit/189668/1 "2010-06-04T18:40:39Z")

</div>

Did I miss the memo?

It’s (very) briefly mentioned in this post by Dave Aitel, third  
paragraph, second sentence…

> **[Dailydave: How to pull a dinosaur out of a hat in 2010](https://seclists.org/dailydave/2010/q2/51)**

---

<div class="post-metadata">

**Author:** ![Hinky\_Dink](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/h/e95f7d/32.png) [@Hinky\_Dink](https://www.ruby-forum.com/u/Hinky_Dink)\
**Post date:** [June 4, 2010, 7:01pm UTC](https://www.ruby-forum.com/t/nginx-remote-exploit/189668/2 "2010-06-04T19:01:09Z")

</div>

On Fri, Jun 04, 2010 at 12:38:58PM -0400, Hinky Dink wrote:

> Did I miss the memo?
> 
> It’s (very) briefly mentioned in this post by Dave Aitel, third  
> paragraph, second sentence…
> 
> [Dailydave: How to pull a dinosaur out of a hat in 2010](http://seclists.org/dailydave/2010/q2/51)

I do not know what he is talking about.  
The current vulnerabilities are listed here:

> **[nginx security advisories](http://nginx.org/en/security_advisories.html)**

and there are no remote exploits among them.

–  
Igor S.

> **[Igor Sysoev](http://sysoev.ru/en/)**

---

<div class="post-metadata">

**Author:** ![Hinky\_Dink](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/h/e95f7d/32.png) [@Hinky\_Dink](https://www.ruby-forum.com/u/Hinky_Dink)\
**Post date:** [June 4, 2010, 7:28pm UTC](https://www.ruby-forum.com/t/nginx-remote-exploit/189668/3 "2010-06-04T19:28:04Z")

</div>

On Sat, Jun 5, 2010 at 12:00 AM, Igor S. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> The current vulnerabilities are listed here:  
> [nginx security advisories](http://nginx.org/en/security_advisories.html)  
> and there are no remote exploits among them.

I believe something related to the recent php pathinfo things

–  
O\< ascii ribbon campaign - stop html mail - [www.asciiribbon.org](http://www.asciiribbon.org)

---

<div class="post-metadata">

**Author:** ![Hinky\_Dink](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/h/e95f7d/32.png) [@Hinky\_Dink](https://www.ruby-forum.com/u/Hinky_Dink)\
**Post date:** [June 4, 2010, 7:33pm UTC](https://www.ruby-forum.com/t/nginx-remote-exploit/189668/4 "2010-06-04T19:33:20Z")

</div>

On Sat, 2010-06-05 at 00:26 +0700, Edho P Arief wrote:

> > 
> 
> I believe something related to the recent php pathinfo things

I believe he is referring to _old_ exploits (hence the title mentioning  
“dinosaurs”). The posting is specifically referring to stuff people  
never got around to and he says “works even when you don’t expect it to”  
about the Nginx exploit.

My feeling is that if you are running an up-to-date version of Nginx  
then whatever exploit he is referring to will not affect you.

Cliff

–