Detections
Analytics
nginx < 1.8.1 / 1.9.x < 1.9.10 Multiple Vulnerabilities
high Nessus Plugin ID 107265
Language:
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
According to the self-reported version in its response header, the version of nginx hosted on the remote web server is less than 1.8.1 or 1.9.x prior to 1.9.10. It is, therefore, affected by multiple vulnerabilities as noted in the vendor advisory.Solution
Upgrade to nginx version 1.8.1 / 1.9.10 or later.See Also
http://www.nessus.org/u?5cf8b270
http://mailman.nginx.org/pipermail/nginx-announce/2016/000168.html
Plugin Details
Severity: High
ID: 107265
File Name: nginx_1_8_1.nasl
Version: 1.8
Type: combined
Agent: unix
Family: Web Servers
Published: 3/9/2018
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2016-0746
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:nginx:nginx
Required KB Items: installed_sw/nginx
Exploit Ease: No known exploits are available
Patch Publication Date: 1/26/2016
Vulnerability Publication Date: 1/26/2016