Approved changes feed: RSS · Atom

cpe:2.3:a:nginx:nginx:0.6.1516:*:*:*:*:*:*:*

part: a version: 0.6.1516 update: *

VendorNginx (1886c50c-7b0f-5a0e-bad0-4811d6f30cfc)
ProductNginx (840af60c-8011-55e4-80ea-75dd6fc56ac0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nginx purl2cpe 2026-06-01 10:11:29.732726
pkg:deb/ubuntu/nginx purl2cpe 2026-06-01 10:11:29.732728
pkg:github/nginx/nginx purl2cpe 2026-06-01 10:11:29.732729
pkg:nginx/nginx purl2cpe 2026-06-01 10:11:29.732731
pkg:rpm/fedora/nginx purl2cpe 2026-06-01 10:11:29.732732
pkg:rpm/opensuse/nginx purl2cpe 2026-06-01 10:11:29.732734

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3898 vulnerable 2026-06-08 04:51:45.198116 Details available
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
Published: 2009-11-24T17:00:00.000Z
Updated: 2024-08-07T06:45:51.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3896 vulnerable 2026-06-08 04:51:45.166418 Details available
src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
Published: 2009-11-24T17:00:00.000Z
Updated: 2024-08-07T06:45:50.766Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.