nginx: Multiple vulnerabilities

nginx: Multiple vulnerabilities Multiple vulnerabilities have been found in nginx, the worst of which may allow execution of arbitrary code. nginx March 28, 2012 March 28, 2012: 1 293785 293786 293788 389319 408367 remote 1.0.14 1.0.14

nginx is a robust, small, and high performance HTTP and reverse proxy server.

Multiple vulnerabilities have been found in nginx:

The TLS protocol does not properly handle session renegotiation requests (CVE-2009-3555).
The "ngx_http_process_request_headers()" function in ngx_http_parse.c could cause a NULL pointer dereference (CVE-2009-3896).
nginx does not properly sanitize user input for the the WebDAV COPY or MOVE methods (CVE-2009-3898).
The "ngx_resolver_copy()" function in ngx_resolver.c contains a boundary error which could cause a heap-based buffer overflow (CVE-2011-4315).
nginx does not properly parse HTTP header responses which could expose sensitive information (CVE-2012-1180).

A remote attacker could possibly execute arbitrary code with the privileges of the nginx process, cause a Denial of Service condition, create or overwrite arbitrary files, or obtain sensitive information.

There is no known workaround at this time.

All nginx users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=www-servers/nginx-1.0.14"

CVE-2009-3555 CVE-2009-3896 CVE-2009-3898 CVE-2011-4315 CVE-2012-1180 craig ackle