CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-10-14
Nostromo nhttpd <= 1.9.6 Directory Traversal Remote Code Execution (RCE) Vulnerability (CVE-2019-16278) Analysis and Mitigation Guide
[Affected Scope] Nostromo nhttpd web server versions 1.9.6 and prior
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the web server process via crafted HTTP requests
[Mitigation] Immediately upgrade to the patched version (1.9.7 or later), or restrict web server execution privileges and block anomalous directory traversal paths