GobyVuls/CVE-2019-16278.md

821 B
Raw Blame History

Nostromo nhttpd RCE (CVE-2019-16278)

Vulnerability Nostromo nhttpd RCE (CVE-2019-16278)
Chinese name Nostromo nhttpd远程代码执行漏洞CVE-2019-16278
CVSS core 9.8
FOFA Query (click to view the results directly) (header="Server: nostromo" || banner="Server: nostromo ")
Number of assets affected 3737
Description Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.
Impact Nostromo nhttpd RCE (CVE-2019-16278)