cbcvebase.
CVE-2012-3380
published 2012-08-31

CVE-2012-3380: Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via…

low2.1CVSS 3.1
AVLACLAuNCPINAN
Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.

Affected

6 ranges
VendorProductVersion rangeFixed in
debiannginx< nginx 1.2.1-2 (bookworm)nginx 1.2.1-2 (bookworm)
f5nginx>= 0 < 1.2.1-21.2.1-2
f5nginx>= 0 < 1.2.1-21.2.1-2
f5nginx>= 0 < 1.2.1-21.2.1-2
f5nginx>= 0 < 1.2.1-21.2.1-2
wargionaxsi<= 0.46

CVSS provenance

nvd2.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv2.1LOW