NGINX buffer underflow security vulnerability
From the Debian Security team (CVE-2009-2629):
nginx … is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.
New versions of our nginx packages that address this security vulnerability are now available. nginx 0.6.39 (with the fair balancer module) is available from the Brightbox apt repositories – running the following command will get you the latest version:
sudo apt-get update sudo apt-get install nginx
Our more experimental nginx-brightbox package has also been upgraded to 0.6.39. This includes a number of nginx addons, such as the upload module, geoip module, and Phusion Passenger 2.0.5.
- Technology:
- Add new comment
- 397 reads
- Feed: brightbox
- Original article


Recent comments
1 year 23 weeks ago
1 year 23 weeks ago
1 year 25 weeks ago
1 year 27 weeks ago
1 year 42 weeks ago
1 year 45 weeks ago
1 year 45 weeks ago
1 year 45 weeks ago
1 year 46 weeks ago
1 year 48 weeks ago