Nostromo HTTP servera ievainojamÄ«ba, kas noved pie attÄlinÄtas koda izpildes
Nostromo (nhttpd) HTTP server has a vulnerability (CVE-2019-16278) that allows an attacker to execute their code on the server remotely by sending a specially crafted HTTP request. The issue will be fixed in release 1.9.7 (not yet published). According to information from the Shodan search engine, the Nostromo HTTP server is used on about 2000 publicly accessible hosts. The vulnerability is caused by an error in the http_verify function, which bypasses accessing content […]
