Vulnerability in F5 Nginx

CVE-2009-4487

nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.

EPSS: 0.295 (98.0th percentile) — read the EPSS interpretation.

Affected products

  • F5 Nginx — versions 0.7.64
  • N/a — versions n/a

Public proof-of-concept exploits

References

  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
  • cve@mitre.org (Exploit, Patch, Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)

Frequently asked questions

What is CVE-2009-4487?
CVE-2009-4487 is a vulnerability in F5 Nginx. Published 2010-01-13.
Is CVE-2009-4487 known to be exploited?
4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.